After some difficulties with Cloudflare, we have spoken now with Sucuri (https://sucuri.net/). They offer malware removal, website firewall (providing DDoS protection among other things, requires DNS redirection to point to their firewalls) and site scanning (via local agent). All features independent (we can offer all or some).
We are thinking that a better approach to solving our customers problems when it comes to security and performance will be to offer (as add-ons) Sucuri (security centric and very focused on our most common apps) and MaxCDN (pure CDN focused on performance).
Any one has had experience with Sucuri? We have already tested (and in talks with them) and looks very promising.
Let us know thoughts on this (Sucuri + MaxCDN) approach (vs Cloudfront). We know this is well overdue and want to get it rolling.
Cloudways TeamMichael Dorchain commented
For small to medium traffic, I'm pretty sure Cloudfront will be a more cost efficient solution for most. For this add-on to be successful it needs to be affordable. If the add-on it doubles or triple the hosting cost it will probably not get so much traction. Hosting + Security still need to remain below the price of a fully managed premium hosting for it to be interesting.