Protect the server. Run the server.
We build DAV NGWAF, a web application firewall that uses machine learning to judge every request. We also set up and run the Linux servers behind it on AWS. Use either one, or both together.
Astro Pema AI LLC, Ashland, Oregon. Linux system administration since the 1980s.
Two services, one approach
Both come from the same place: decades of running Linux servers on the open internet, and a firewall built to defend them.
DAV NGWAF
A next-generation web application firewall
- A neural network written in Rust scores each HTTP request as it arrives
- Attacks are mapped to MITRE ATT&CK techniques, so you know what was tried
- Repeat offenders are dropped at the network layer, before they reach your web server again
- DAVSOC, our security operations dashboard, shows detections and reports
Linux on AWS
Through Pema Hosting, our AWS service
- You open the AWS account and keep full ownership
- We build the server: DNS, mail, NGINX and Apache
- We choose the right EC2 instance family and size
- We keep it patched, backed up and monitored
How DAV NGWAF handles a request
Rule-based firewalls match known signatures. DAV NGWAF also looks at the shape of each request, so it can catch variations that no rule was written for.
The request arrives
NGINX at the edge receives it and records the real client address.
The model scores it
A CNN-GRU neural network in the Rust engine judges whether the request is an attack.
It's classified
Detections are matched against a MITRE ATT&CK pattern database.
The source is blocked
Attacking addresses are dropped at the network layer for all later traffic.
You see it in DAVSOC
Every detection lands in the dashboard and in scheduled reports.
Runs on ordinary hardware
Inference runs on the CPU by default, on both x86 and ARM servers, including AWS Graviton. GPU acceleration is available as an option.
Fits NGINX and Apache
DAV NGWAF ships with the edge configuration for NGINX and Apache, so it slots into the stack you already run.
Engine, dashboard and edge together
The Rust engine, the DAVSOC dashboard and the edge configuration are delivered as one product and tested together.
Your traffic stays on your server
Inspection happens on your own machine. Requests are not sent to an outside cloud service to be judged.
Licensing
Three ways to license DAV NGWAF, depending on how much control your organization needs.
| License | What you get | Good for |
|---|---|---|
| Business | The compiled DAV NGWAF product, licensed to your server | Small and mid-sized businesses protecting their own sites |
| Enterprise | The compiled product plus encrypted source, with quarterly pattern updates built on site | Organizations that need to build and audit inside their own environment |
| Source and white label | Full source access | Acquisition or reselling under your own brand |
All licenses run for a minimum of one year. Reports, data science and the full SOC dashboard are available as add-ons. Contact us for pricing.
In production, not in a lab
DAV NGWAF protects our own servers every day, including the AWS server this page comes from.
- Protecting production domains since late 2025
- Running on AWS on an AlmaLinux Graviton server
- Live WAF verification reports, updated hourly
- Dual-layer IDS paper (PDF)
- DAV NGWAF technical document (PDF)
About Astro Pema AI
Astro Pema AI LLC is an Oregon company founded by Juan David Correa-Landreau, who has worked with Linux for more than 20 years and has consulted independently since 2001. He holds a BS in Mathematics and Computer Science from the University of Puerto Rico at Mayagüez and a certificate in Data Science and Machine Learning from MIT IDSS.
DAV NGWAF grew from a Python prototype into a Rust engine with network-layer enforcement and MITRE ATT&CK mapping. Its development has been documented publicly from the start.
Protect your site, or let us run the server
Tell us what you run today and what you need. We read every real inquiry.