Adaptive rate limiting
Per-plan and per-endpoint limits that adjust to how each client actually behaves. Good clients never notice; abusive ones never get through.
Quota stands in front of your API and enforces the rules at the edge: legitimate clients flow, abuse gets stopped and spikes get absorbed. Your backend never even notices.
Blue gets through. Orange waits.
What Quota does for your API, and where you control it from.
Per-plan and per-endpoint limits that adjust to how each client actually behaves. Good clients never notice; abusive ones never get through.
Circuit breakers, burst mitigation and connection control. Bad traffic dies at the gate, not at your origin.
A high-performance proxy with its hot state in memory. Designed to never be your bottleneck.
Requests, blocks and node health, live. You know what's happening while it's happening.
We deploy in Europe today; North America and Asia-Pacific are on the roadmap. Every request resolves close by.
You bring the backend; Quota stands in front. No SDKs, no middleware, no rewriting your stack.
Tell us where your API lives. We deploy your edge node in Europe — more regions on the way — in minutes.
We detect your endpoints and you decide the limits: per plan, per client, per route.
The edge absorbs the spikes, stops the abuse and tells you all about it in the panel.
api.yourcompany.com. CNAME edge-eu-1.quota.at. One record. Traffic comes in through the edge and flows on to your backend.
x-quota-limit: 100
x-quota-remaining: 97
— and the excess: a 429 with retry-after
that never reaches your origin Standard headers on every legitimate request. Nothing you're forced to parse.
Not everyone wants a public API. Quoxy is our ngrok-style proxy: it opens a secure tunnel from your network to the Quota edge, and your backend stays right where it is — at home, at the office, in your rack.
Everything Quota does, you could build. The question is whether you want to maintain it.
Every edge node persists in arkeion, our own database written in Rust. No Postgres, no Redis: one single piece, ours, tuned for this exact job.
Move the traffic and we'll tell you your plan.
These prices hold exactly as they are for Quota's first year. They'll go up afterwards — but join now and you're an early adopter: you keep your price.
Rule of thumb: an active user of a typical app makes ~500 req/month.
At ~2M req/mo your plan is Starter.
1 project: a landing with an API, an MVP, a form or booking flow, an internal tool, a micro-service, a pre-launch startup.
Get started1 product in the wild: a small SaaS with real customers, an online store, a growing mobile app, a modest public API.
Choose StarterAn established business: a SaaS with traction, serious e-commerce, a mobile app with tens of thousands of users, real-time. Includes Quoxy.
Choose ProA marketplace, a big mobile app, mission-critical APIs, multi-region.
Talk to usNo. Quota is a proxy that stands in front: you point traffic at the edge node and it forwards to your API. No SDKs, no middleware, no code changes.
Legitimate requests arrive as always, with headers added (x-quota-limit, x-quota-remaining). The excess gets a 429 with retry-after at the edge and never touches your origin.
In Europe today. North America and Asia-Pacific are on the roadmap. Every node is yours — you never share a queue with anyone.
From the panel: per endpoint, per client or per plan. Quota detects your endpoints automatically and you set the rules for each one.
That's what Quoxy is for — our ngrok-style proxy: it opens a secure tunnel from your network to the edge, so you stay self-hosted without exposing your API to the internet. It ships alongside Quota and is included in the Pro plan.
Yes, any time from the panel. When you upgrade, your node keeps its configuration; only the available limits change.
From €9/month · Node deployed in minutes