Arcjet is a security SDK that integrates directly into your application runtime rather than requiring proxy configuration, DNS changes, or infrastructure work. It supports JavaScript, TypeScript, and Python across frameworks like Next.js, Remix, Nuxt, NestJS, Express, FastAPI, and Flask. Integration follows a consistent pattern: initialize Arcjet once and call it at the start of request handlers. This keeps security decisions inside your application's control flow, makes them testable and observable, and allows incremental rollout starting with high-risk endpoints. No architectural changes to routing, hosting, or deployment pipelines are required.
Table of contents
What Stacks Does Arcjet Support?The Core Integration PatternWhat Actually Changes in Your Code?Declarative Rules Instead of Ad Hoc ChecksExplicit Decisions Inside Your Control FlowWhat Stays the Same?How It Looks Across FrameworksIncremental AdoptionIntegration Should Feel RoutineSort: