After some difficulties with Cloudflare, we have spoken now with Sucuri (https://sucuri.net/). They offer malware removal, website firewall (providing DDoS protection among other things, requires DNS redirection to point to their firewalls) and site scanning (via local agent). All features independent (we can offer all or some).
We are thinking that a better approach to solving our customers problems when it comes to security and performance will be to offer (as add-ons) Sucuri (security centric and very focused on our most common apps) and MaxCDN (pure CDN focused on performance).
Any one has had experience with Sucuri? We have already tested (and in talks with them) and looks very promising.
Let us know thoughts on this (Sucuri + MaxCDN) approach (vs Cloudfront). We know this is well overdue and want to get it rolling.
Cloudways TeamUmesh Joshi commented
We believe the hosting provider / managed wp hosting should cover security so therefore we do not have to add a bloated security package on each application. This reduces the page loading speed significantly and the time it take to configure and manage each site reduces our client productivity. We have been considering other providers recently because of the above issue. We really hope you implement something soon or you will lose customers rapidly. Other competitors are also offering Cloudflare Railgun as a free service. This is a serious game changer!!Umesh Joshi commented
We have been using MAXCDN which is good but we are now interested in this solution as it is the cheapest and a reliable alternate = https://www.keycdn.com. I have seen several hosting companies integrate this service for free as a value added feature, along with free SSL (which you have already provided recently :) )