Overload.su stresser simulates real L4 and L7 attack traffic against infrastructure you own — botnet-powered L4 up to 20 Tb/s and constantly updated L7 methods.
Overload.su is a stresser and load testing service run by 78 OVER 37 LIMITED, a company registered in London, United Kingdom. It was founded on August 18, 2024 by CEO Jordan McRae, who still leads the platform's strategy around ethical, high-impact load testing and cybersecurity tooling. In its first year the service grew past 20,000 clients and reached a pace of more than 50,000 professional load tests per day — all operated by a core team of just five people. In January 2025 the platform went through a full redesign that multiplied its server capacity fivefold to keep up with demand from large enterprise clients.
In practical terms, Overload.su is a web-based attack panel. After registering and proving that you own or are authorized to test a resource, you pick a method and launch controlled traffic at your own infrastructure. Layer 4 attacks are powered by botnet capacity rated from 40 Gb/s up to 20 Tb/s, while the ever-evolving Layer 7 methods focus on application-level pressure — the kind of traffic that exhausts databases, login endpoints and search backends rather than just bandwidth. The hardware side uses dedicated Tier 7 servers on a custom network backbone, with high-frequency packet analysis, optimised throughput testing and advanced vulnerability diagnostics.
Why is it useful? Because the UK alone recorded over 111,000 DDoS attacks in 2024, with peak traffic above 545 Gbps, and 43% of British businesses reported a cyberattack that year. Overload.su lets you reproduce those conditions safely and find the exact point where your stack fails — before an attacker or a viral traffic spike does it in production. The panel also bundles automated ULP Leak Check, pentest tooling and a takedown service. Access is governed by strict Terms of Service: government, military, banking, educational and critical-infrastructure targets are prohibited, and ownership verification is mandatory. That combination of real power, instant execution and enforced authorization is what separates Overload.su from generic stresser services.
Recorded incidents in 2024. Peak attack traffic exceeded 545 Gbps.
Year-over-year rise in UK critical cyber incidents per NCSC data.
UK companies that reported a cyberattack in 2024.
Ever-evolving methods that set world records: HTTP floods, login storms, search and cart abuse. The traffic that bypasses bandwidth graphs and kills databases.
Flexible transport-layer methods with real throughput — 40 Gb/s to 20 Tb/s — built to outperform competitor defenses and expose weak state tables.
Automated leak detection bundled into the panel, plus pentest tooling and a paid takedown service.
Dedicated servers on a custom network backbone with high-frequency packet analysis and optimised throughput testing.
Create an account on overload.su and prove you control the target. Government, banking and critical infrastructure are prohibited by the Terms of Service.
Choose the attack vector, set power and duration. Launch instantly from the web panel — no agents, no setup.
Watch where latency spikes, where the stack saturates and what breaks first. That map is your incident runbook.