Skip to main content

Security and Performance for the Linux Web Stack

Powering web infrastructure for Fortune 500 companies, fintech unicorns, and billion-dollar enterprises worldwide.

About GetPageSpeed

GetPageSpeed is on a mission to keep the Linux web stack fast and secure, without forcing anyone to rebuild it. Since 2016 we have packaged, patched and hardened the software that serves the web: NGINX and its modules, Varnish, and PHP, including runtimes long past their official end of life. Hosting providers, MSPs, agencies and enterprises install our packages with one command and receive security fixes the same way.

We maintain the largest collection of enterprise-grade NGINX modules available for Linux, and our repository serves production systems handling billions of requests daily.

By the numbers: 100+ prebuilt NGINX modules · 6 Linux distribution families (RHEL-compatible, Amazon Linux, Fedora, SLES, Ubuntu, Debian) · x86_64 and ARM64 · Everpatch PHP for CentOS 7 (5.4 through 8.4), Ubuntu 20.04/18.04 and Debian 10 · since 2016

Trusted by:

  • Fortune 500 telecommunications providers
  • Multi-billion dollar cloud security companies
  • European luxury brands with global e-commerce operations
  • Fintech unicorns processing billions in transactions
  • VFX studios behind major Hollywood productions
  • Hosting providers serving 290,000+ domains
  • Major research universities

What We Cover

What We Build

Proprietary NGINX Modules

Beyond packaging open-source modules, we develop proprietary solutions for problems that enterprise customers face at scale.

Security & Access Control

ipset-access — Zero-latency IP blocking using Linux kernel ipsets. Block millions of IPs with zero overhead. Features proof-of-work challenges, honeypot traps, rate limiting, and Prometheus metrics.

nftset-access — Modern successor using nftables. Same power, future-proof framework. Live set updates without NGINX reloads.

bot-verifier — Validates search engine bot authenticity via DNS. Stops fake Googlebot/Bingbot abuse with async resolution and Redis caching.

cookie-flag — Sets HttpOnly, Secure, and SameSite flags on upstream cookies. Harden cookie security without touching application code.

auth-pam — PAM authentication for NGINX. Authenticate against system users, LDAP, or any PAM-compatible backend.

spnego-http-auth — Kerberos/SPNEGO single sign-on for NGINX. Enterprise Active Directory integration without application changes.

Performance & Intelligence

device-type — Comprehensive device detection at the edge. 22 NGINX variables, 3,600+ patterns covering devices, browsers, OSes, and 50+ AI crawlers. Zero configuration — load the module, use the variables.

tuning — Observes real traffic and provides data-driven tuning recommendations. Collects upstream metrics with lock-free counters and outputs ready-to-use config snippets via JSON API.

sorted-args — Normalizes query string parameters by sorting them. Dramatically improves cache hit rates when clients send parameters in different orders.

cache-purge — Targeted cache invalidation for FastCGI, proxy, SCGI, and uWSGI caches. Essential for dynamic sites that need instant content updates.

Content

markdown — Transforms Markdown files to HTML on-the-fly. Serve documentation directly from NGINX without a build step.

rdns — Reverse DNS lookups for incoming connections with hostname-based access control. Supports regex matching and uses NGINX resolver cache.

RPM and APT Repositories

100+ pre-compiled dynamic modules for RHEL, AlmaLinux, Rocky Linux, CentOS, Amazon Linux, Fedora and SLES, plus Ubuntu and Debian. Install with a single dnf install or apt install command, no compilation required.

Popular modules include:

  • ModSecurity WAF — Web application firewall included, not an expensive add-on
  • Google PageSpeed — Automatic frontend optimization
  • Brotli — 15-25% better compression than GZIP
  • GeoIP2 — Location-based routing and access control
  • Lua — Scripting for custom request handling
  • HTTP/3 QUIC — Next-generation protocol support

Learn more | Subscribe Now

Why Small Teams Win

Enterprise vendors have layers of bureaucracy, account managers, and sales cycles measured in quarters. We have engineers who answer your questions directly—often within hours.

What this means for you:

Traditional Vendor GetPageSpeed
$2,500/year minimum From $10/month
Sales calls before pricing Transparent pricing online
Weeks for support escalation Direct engineer access
Quarterly release cycles Continuous updates
One-size-fits-all solutions Custom module development available

When companies forecasting 50% of the world’s wind capacity need mission-critical NGINX security modules, or when VFX studios behind Marvel films need specialized connectors—they choose GetPageSpeed.

Not because we’re the biggest. Because we’re the best at what we do.

Technical Excellence

EDGE

Our flagship web server, included with Ultra:

  • HTTP/3 and QUIC on every Enterprise Linux release, EL7 through EL10
  • Post-quantum TLS key exchange (X25519MLKEM768) and Encrypted Client Hello
  • Built-in microcache profile with request collapsing
  • Active health checks for upstreams

NGINX-MOD

Our enhanced NGINX build includes performance patches not in mainline:

  • Full HTTP/2 HPACK encoding for better compression
  • Dynamic TLS record sizing for faster HTTPS handshakes
  • Latest OpenSSL/QuicTLS builds
  • Active health checks for upstreams

Production-Ready Packages

Every module is:

  • Built for both x86_64 and ARM64 architectures
  • SELinux-compatible with security policies included
  • Tested on real production workloads
  • CDN-delivered for reliable, fast installs worldwide

Open Source Contributions

We maintain and contribute to numerous NGINX ecosystem projects. Browse our work on GitHub.

Resources

Free Tools

Documentation & Services

Stay Connected

Company

GetPageSpeed LLC · 131 Continental Drive, Suite 305, Newark, DE 19713, USA