I am very supportive of your point of view. One of my clients' image website sites( https://toppng.com ) mainly provides free image downloads. A large number of DDoS attacks received last month caused the site to crash for several days. The impact on the site is very large.

i was moving my site from inmotionhosting
inmediatly i start receiving ddos attack that crashes my cloudways server
no support solution

Really disappointed to see this has randomly been marked "completed" without any explanation from Cloudways beyond some general possibilities floated 5 years ago and nothing substantive since.

DDoS Protection - the CDN you offer through StackPath (formerly MaxCDN), is only basic CDN and offers no DDoS or security protection.

DDoS Protection - the CDN you offer through StackPath (formerly MaxCDN), is only basic CDN and offers no DDoS or security protection. Is this on the Roadmap for development or addon?

WAFs that add a challenge page before your site loads are no good. We struggle constantly to shave microseconds off page load times. We tried stackpath and it adds about a second...

"We know this is well overdue and want to get it rolling."

It's now going on 4 years since Cloudways responded to the OP... which is now over 5 years ago.
How much longer? Another 2 years? 5 years? 22 years? Seriously, how much longer is this going to go from "planned" to "implemented"?

I am very supportive of your point of view. One of my clients' image website sites( https://www.pinpng.com ) mainly provides free image downloads. A large number of DDoS attacks received last month caused the site to crash for several days. The impact on the site is very large.

+1 for StackPath WAF/DDOS option

What is the status on this service

We already have CDN by StackPath, and it works very well. DDoS is mandatory these days, most WordPress sites are being attacked in an hourly base. Most hosting companies offer some kind of effective DDoS included on the server package, and this should be the rule.

Sucuri (as well as Cloudflare) is very hard to setup, costs pretty expensive money and is definitely not for the average Cloudways customer (like me). So please, include in some way a DDoS or full WAF protection, for an extra USD per application (like the StackPath CDN) and we'll all get it.

Stackpath?

https://feedback.cloudways.com/forums/203824-service-improvement/suggestions/12302775-add-bitninja-io-security-for-both-server-and-apps

This sounds great, what is the status on this?

2015... 3 years ago Cloudways answered on this thread!?

What do you think about StackPath (https://www.stackpath.com/)?

StackPath sound like a great option here!
Is Cloudways latest response on this from 2015? What is current status?

Thanks!

A.
as already mentioned Sucuri doesn't do endpoint-security and thus can't prevent DDoS attacks against your server IP. The shield Sucuri is offering may be good, but it is only a partial solution and the service doesn't come cheap.

B.
As you are already offering StackPath wouldn't it make sense to integrate StackPath's DoS protection?

C.
I would also like to suggest you may talk to KeyCDN. Not so much for Dos protection but for their great CDN services.

Please implement this ASAP.

Why don't you use Stackpath? You're already using them now for CDN...

I don't like sucuri or max CDN as none of them have POPs in India. Also, cloudflare is advantageous as you can add page rules and rate limiting at DNS level

I'm not convinced any cloud-based DDoS protection is effective against sophisticated attacks, since the server's actual IP address still faces the public internet and can often be discovered.

Ideally the infrastructure providers would make this standard (they could protect their whole operation and all customers with a single robust solution). It seems wrong to me that this is only occasionally offered, and as a premium service.

But since that's not likely to change anytime soon, what can Cloudways offer on the server-level? There must be options for this.