Arcjet helps developers protect their apps in just a few lines of code. Bot detection. Rate limiting. Email validation. Attack protection. Data redaction. A developer-first approach to security.

This is an example Next.js application demonstrating the use of multiple features. It is deployed at https://example.arcjet.com.

• Signup form protection uses Arcjet's server-side email verification configured to block disposable providers and ensure that the domain has a valid MX record. It also includes rate limiting and bot protection to prevent automated abuse.
• Bot protection shows how a page can be protected from automated clients.
• Rate limiting shows the use of different rate limit configurations depending on the authenticated user. A logged-in user can make more requests than an anonymous user.
• Attack protection demonstrates Arcjet Shield, which detects suspicious behavior, such as SQL injection and cross-site scripting attacks.
• Sensitive info protects against clients sending you sensitive information such as PII that you do not wish to handle.

1. Register for a free Arcjet account.

2. Install dependencies:

npm ci

3. Rename .env.local.example to .env.local and add your Arcjet key. If you want to test the rate limiting authentication, you will also need to add an Auth.js secret and create a GitHub OAuth app.

4. Start the dev server

npm run dev

5. Open http://localhost:3000 in your browser.

Check out the docs, contact support, or join our Discord server.

• Auth: Auth.js
• App: Next.js
• UI: shadcn/ui
• Form handling: React Hook Form (see also our full form protection example)
• Client-side validation: Zod
• Security: Arcjet