We signed a 6-month contract for their advanced DDoS protection tier after a major volumetric attack took our primary service offline for 3 hours. Here's the raw data.
**Pros:**
* Attack mitigation time is as advertised. 10-15 seconds from detection to full mitigation for layer 7 floods we've seen.
* The analytics dashboard is useful. Shows top attack vectors, source ASNs, and request rates in real-time.
* No bandwidth overage charges during attacks. This was a key contract point.
**Cons:**
* The "hidden" cost is in tuning. Their default managed rulesets are aggressive. We had to spend ~40 engineering hours fine-tuning to reduce false positives on our ML inference endpoints.
* Log retention is a separate product. If you need forensic logs post-attack beyond 24 hours, you're paying extra.
* GPU-heavy workloads (our batch inference) saw increased latency (~7-12ms) even with all rules in "allow" mode. Their support confirmed this is due to traffic routing.
**Bottom line:** It works, but you pay for it in engineering time, not just the contract price. For us, the uptime guarantee was worth the tuning overhead. If you have a simple web app, it's probably overkill.
ea
Prove it with a benchmark.