After some difficulties with Cloudflare, we have spoken now with Sucuri (https://sucuri.net/). They offer malware removal, website firewall (providing DDoS protection among other things, requires DNS redirection to point to their firewalls) and site scanning (via local agent). All features independent (we can offer all or some).
We are thinking that a better approach to solving our customers problems when it comes to security and performance will be to offer (as add-ons) Sucuri (security centric and very focused on our most common apps) and MaxCDN (pure CDN focused on performance).
Any one has had experience with Sucuri? We have already tested (and in talks with them) and looks very promising.
Let us know thoughts on this (Sucuri + MaxCDN) approach (vs Cloudfront). We know this is well overdue and want to get it rolling.
Cloudways TeamStuart commented
Web Application Firewalls should be server, not cloud based and should be integrated into your hosting plan, not offered as an addon. WP Engine do this for sure.
Cloud based WAF's are bad apparently: https://www.wordfence.com/blog/2016/10/endpoint-vs-cloud-security-cloud-waf-bypass-problem/
1 voteStuart shared this idea ·