dropify.dev is a three-product edge security suite for high-demand e-commerce drops. Cryptographic request signing, local rate-limiting, and a fair waiting room — on any stack, no DNS hijack required.
The suite
Every product enforces locally using a signed policy blob from the brain. Your origin never exposes its secret logic.
Cryptographic request signing
Each request is signed with an HMAC token derived from a per-tenant base secret that never leaves our brain. The adapter validates the signature locally with a short-lived epoch salt — zero per-request callout, zero replay risk. Works inside a Cloudflare Worker, a WooCommerce plugin, or a Node server.
Local rate-limiting + badlist enforcement
Rate limits and bans enforced entirely at the edge by a brain-signed policy blob. No per-request round-trip to our cloud. Cross-tenant intel and updated thresholds are pushed via periodic brain sync. Fail-safe: falls back to last-known-good policy if the brain is unreachable.
Fair waiting rooms for high-demand drops
Cloudflare Durable-Object waiting rooms with cryptographic fairness. Visitors
join a queue, solve a PoW + Turnstile challenge, and receive a signed pass.
The adapter validates the pass locally — no callout per checkout page load.
Hosted on *.dropify.dev or your own domain (Infinite tier).
The architecture
Queue-it and Queue-Fair both force a tradeoff: either become their reverse proxy or lose enforcement guarantees. We solved this the same way Queue-Fair did — but for all three products. The brain (signing algorithm, scoring, queue admission) runs in our Cloudflare account. Thin open-source adapters run wherever you already are, validating locally with a signed token.
Your WooCommerce server, your Cloudflare Worker, your Node backend — all protected without routing your traffic through us. No bandwidth liability for us, no performance hit for you, no PCI scope creep.
Get startedvalidate locally
validate locally
validate locally
Why dropify.dev
| dropify.dev | CrowdHandler | Queue-it | Arcjet | |
|---|---|---|---|---|
| Waiting room / queue | Yes (Drop Room) | Yes | Yes | No |
| Bot / request signing | Yes (Shield) | No | No | Yes |
| Rate limiting + badlist | Yes (Guard) | No | No | Yes |
| Local enforcement (no per-request callout) | Yes | No | No | Yes |
| Open-source adapters (MIT) | Yes | No | No | Yes |
| Works without DNS change | Yes | Yes | Partial | Yes |
| Annual contract required | No | No | Yes | No |
| Mid-market drop price (50k visitors/event) | ~$1,749/mo | $3,200/mo (queue only) | $3,750+/mo (annual) | N/A |
Set up in minutes. Install the open-source adapter for your stack, paste in your adapter key, and you're live.