Google launches Project Shield, a free DDOS mitigation service, to all non-state news sites
Google Wants to Save News Sites From Cyberattacks—For Free — Mehdi Yahyanejad thought that after Iranians voted on June 12, 2009, he would finally get some rest.
Context & Ripple Effects
Project Shield is Google putting its own edge infrastructure behind independent media: any non-state news site can route traffic through Google's network and absorb denial-of-service attacks for free. The move answers a pattern the coverage keeps documenting — outlets like KrebsOnSecurity being knocked offline by attacks too large for standalone hosting, which Google's engineers later recounted defending through the site's onboarding into Project Shield.
What makes this launch consequential is how it compounds: within a year Google spun the same capability into election-focused security tools, then Alphabet's Jigsaw extended the free shield across the EU ahead of elections via its 2019 expansion, and by 2021 the program had grown into hardware handouts of over 10,000 security keys for journalists and high-risk users.
First-order effects
- News sites that previously faced a choice between paying for mitigation or going dark during an attack now get Google-scale DDoS absorption at zero cost, removing the budget barrier that made small outlets easiest to silence.
- Attackers targeting independent media lose their cheapest weapon: flooding a Shield-protected site means attacking Google's network rather than a single origin server.
Second-order effects
- Google converts a defensive giveaway into an ecosystem play — election bodies, human rights groups, and journalists get pulled onto Google infrastructure first for security, deepening dependence on one company's stack.
- Commercial DDoS-mitigation providers face a free competitor at the low end of the market, pressuring them to differentiate on features and enterprise support rather than basic flood absorption.
Third-order effects
- If the pattern holds, critical civic infrastructure — press, elections, rights groups — consolidates behind a handful of hyperscale platforms whose scale becomes the de facto defense layer, raising questions about who governs that chokepoint.
- The free shield doubles as a funnel into paid products: the same ML-driven protection later shipped commercially as Google Cloud Armor Adaptive Protection, showing philanthropy and cloud revenue running on shared rails.
The trend: Cyber defense for civil society is migrating from purchased services to platform-donated infrastructure, with Google's free tiers setting the template that rivals must match or cede the trust layer.