Official Cloudflare Partner — Enterprise DDoS Protection
Enterprise DDoS Protection
for Kenyan Websites.
Powered by Cloudflare's global network, every HostGuru website is shielded against volumetric attacks, application layer threats, and zero-day exploits — 24/7, automatically.
Always-On Protection
Cloudflare Partner
WAF Included
Zero Config
Free with Hosting
Nairobi Support
Cloudflare Free included with all hosting plans • Cloudflare Pro from KES 3,299/mo
HostGuru Shield
Powered by Cloudflare Network
Layer 7 — WAF & Bot Filter
ACTIVE
Layer 4 — TCP/UDP Protection
ACTIVE
Layer 3 — Network-Level DDoS
ACTIVE
Volumetric Attack Detected
BLOCKING
CDN Edge Caching (310 PoPs)
ACTIVE
48,291
Malicious requests blocked
in the last 24 hours across our network
in the last 24 hours across our network
Cloudflare
Official Authorised Partner
Cloudflare Authorised Reseller & Integration Partner
310+
Global PoPs
310 Tbps
Network Capacity
99.99%
Uptime SLA
~50ms
Global Latency
Defence Architecture
Our Multi-Layer Protection Stack
Every request to your website passes through multiple defence layers before it reaches your server. Attacks are blocked at the edge — never touching your hosting environment.
Traffic Flow
Internet Traffic Arrives
All incoming requests first hit Cloudflare's 310-PoP global network — never your origin server directly.
Cloudflare Edge
DDoS & Volumetric Filter
Cloudflare's Anycast network absorbs and scrubs volumetric attacks up to 310 Tbps before they propagate.
Layer 3/4 Shield
WAF — Application Layer
Our Web Application Firewall inspects every HTTP/S request for SQL injection, XSS, CSRF and OWASP Top 10 threats.
Layer 7 WAF
Bot & Crawler Filter
Malicious bots, scrapers, credential stuffers and AI crawlers are fingerprinted and blocked using ML-based detection.
Bot Management
Rate Limiting & Throttling
Burst traffic from single IPs is rate-limited. Legitimate spikes from marketing campaigns or viral content pass through freely.
Rate Limiting
Your HostGuru Server
Only clean, verified traffic reaches your hosting server. Your website resources are never exposed to raw attack traffic.
Origin Protected
What's Included
Always-On DDoS Mitigation
Protection is always active — no manual intervention required. Attacks are detected and mitigated in under 3 seconds automatically.
Cloudflare Global CDN
Your website content is cached at 310 edge locations worldwide, reducing latency and preventing origin overload during attack spikes.
SSL/TLS Encryption
End-to-end HTTPS with TLS 1.3 ensures all data in transit is encrypted — protecting your users and satisfying browser security requirements.
Web Application Firewall
OWASP Top 10 rules, custom rulesets, and HostGuru-managed rules block SQL injection, XSS, RFI, LFI and application-level attacks.
Bot Management
Cloudflare's ML bot scoring identifies and blocks bad bots while allowing legitimate search engines, monitoring tools and API clients through.
Real-Time Threat Dashboard
Monitor live traffic, blocked threats, geographic attack sources, and bandwidth usage from your HostGuru control panel.
Official Partnership
Why Cloudflare Powers Our Security
As an authorised Cloudflare partner, we deploy Cloudflare's enterprise-grade security stack directly on your hosting account — the same protection used by millions of websites worldwide.
Largest DDoS Mitigation Network
Cloudflare operates one of the world's largest networks with 310+ data centres across 100+ countries. This scale means Cloudflare can absorb attacks that would overwhelm any single provider.
Threat Intelligence at Scale
Cloudflare analyses traffic from 20%+ of all internet traffic. This gives their systems unprecedented threat intelligence to identify new attack patterns before they reach your site.
Zero-Day Attack Protection
Cloudflare's security research team (Project Galileo, Athenian) discovers and deploys protection for zero-day vulnerabilities across all partner networks simultaneously.
Keny-Optimised Edge
Cloudflare has edge nodes in Nairobi and across East Africa. Your Kenyan visitors get fast, protected connections from a nearby PoP — not routed through Europe or the US.
Cloudflare Global Network
As deployed on HostGuru
The same Cloudflare network protecting Airbnb, Discord, Shopify, and Kenya's major financial institutions now protects every HostGuru-hosted website.
310+
Data Centres Globally
310 Tbps
Network Capacity
100+
Countries Covered
3s
Attack Mitigation SLA
20%
of Global Internet Traffic
1B+
IPs in Threat DB
Protects businesses including
Kenya Banks
E-Commerce
SACCOs
Government Sites
Hospitals
Schools
Threat Coverage
Every Attack Type. Blocked.
Kenyan websites face the same threat landscape as global enterprises. Our Cloudflare-powered stack handles every major attack vector.
Volumetric DDoS (L3/L4)
Terabit-scale floods that saturate your bandwidth — UDP floods, ICMP floods, SYN floods, amplification attacks. Cloudflare absorbs these at the network edge before your server ever sees the traffic.
Protected
Application Layer (L7)
HTTP/S floods that mimic legitimate traffic — Slowloris, GET/POST floods, HTTPS exhaustion. Our WAF and rate limiting distinguish attack traffic from real user requests.
Protected
SQL Injection
Attackers injecting malicious SQL into your login forms, search boxes and API endpoints. The WAF filters these patterns before they reach your database.
Protected
Cross-Site Scripting (XSS)
Malicious scripts injected into your web pages targeting your users' browsers and stealing session cookies. WAF rules block XSS payloads at the edge.
Protected
Credential Stuffing
Automated bots running through lists of leaked username/password pairs against your login pages. Bot management detects and blocks these bot fingerprints.
Protected
Malicious Scrapers & Bots
Competitor scrapers, content thieves, price bots and AI training crawlers consuming your bandwidth without consent. Bot scoring blocks unwanted automation.
Protected
Cloudflare Plans
Choose Your Cloudflare Protection Plan
Official Cloudflare plans resold by HostGuru Africa — billed in KES with M-Pesa support, configured and managed by our team.
Free
Cloudflare Free
For personal or hobby projects that are not business-critical.
KES 0 /month — always free
Included with all HostGuru hosting plans
- Cloudflare CDN — 310+ global PoPs
- Basic DDoS mitigation (Layer 3/4)
- Free SSL — TLS 1.3 included
- Browser caching & compression
- Nairobi edge routing
- Always-on, zero configuration
Most Popular
Pro
Cloudflare Pro
For professional websites that are not business-critical.
KES 3,299 /mo on annual billing
KES 4,099/mo on monthly billing
- Everything in Free
- Web Application Firewall (WAF)
- Advanced DDoS mitigation (L7)
- Image optimisation
- Mobile performance optimisation
- Bot fight mode
- Custom SSL certificates
- Priority support via HostGuru
Business
Cloudflare Business
For small businesses operating online.
KES 32,999 /mo on annual billing
KES 40,999/mo on monthly billing
- Everything in Pro
- Advanced WAF rulesets & custom rules
- Advanced bot management
- Rate limiting (advanced)
- 100% uptime SLA
- Custom SSL for multiple domains
- PCI DSS compliant setup
- Dedicated account manager via HostGuru
All plans resold and managed by HostGuru Africa • Billed in KES • M-Pesa supported • Configured by our team
FAQs
DDoS Protection FAQs
A Distributed Denial of Service (DDoS) attack is when an attacker uses thousands of compromised computers (a botnet) to flood your website with traffic. The goal is to overwhelm your server so that legitimate visitors cannot access your site. Attacks can range from simple floods to sophisticated application-layer attacks that mimic real user behaviour.
Yes. All HostGuru hosting plans include baseline Cloudflare DDoS protection at no extra cost. This includes CDN caching, Layer 3/4 mitigation, and free SSL. For advanced WAF and bot management, Cloudflare Pro starts at KES 3,299/month (annual) or KES 4,099/month billed monthly.
As an authorised Cloudflare partner, HostGuru can provision Cloudflare's enterprise-grade security stack directly on your hosting account. This includes the same Cloudflare network that protects millions of websites globally, including major financial institutions and government sites. You don't need to manage Cloudflare separately — we configure and maintain it for you.
Cloudflare's automated DDoS mitigation detects and responds to attacks within 3 seconds on average. For most volumetric attacks, mitigation is so fast that your website visitors experience no interruption at all. The attack traffic is absorbed by Cloudflare's global edge network before it reaches your server.
No — it improves it. Cloudflare's CDN caches your website content at 310+ edge locations worldwide, including in Nairobi. This means your Kenyan visitors load your site from a local server, reducing latency. SSL termination at the edge also reduces the load on your origin server.
Yes. Our WAF rules include specific protections for e-commerce platforms. We configure rules to protect login pages, checkout pages, and payment gateway callback URLs. Cloudflare's bot management also helps prevent card testing attacks where attackers use your payment form to test stolen credit card numbers.
With our protection enabled, your site continues to operate normally during most attacks. Cloudflare absorbs the attack traffic at the edge. In the event of an extremely large or sophisticated attack, our team is alerted and can apply emergency rules within minutes. Your visitors may see a brief Cloudflare verification challenge (CAPTCHA) during peak attack periods.
For the standard Cloudflare CDN and DDoS protection, yes — your domain's nameservers need to point through Cloudflare. Our team handles this configuration for you during setup. The process takes 24–48 hours for DNS propagation and your site remains accessible throughout.
Also explore
Stay Protected
Protect Your Website
Protect Your Website
Before Attackers Strike.
Every HostGuru hosting plan comes with Cloudflare DDoS protection built in. No configuration, no extra setup — your site is shielded from the moment it goes live.
Official Cloudflare Partner • Always-on protection • Nairobi support team • 99.99% uptime SLA
Cloudflare-powered protection on every plan
DDoS Attack Types We Block — 24/7
UDP Flood
SYN Flood
HTTP Flood
DNS Amplification
ICMP Flood
Slowloris
NTP Amplification
Smurf Attack
Layer 7 Attacks
Volumetric Attacks
Protocol Attacks
Application Layer
Always-on mitigation • No configuration required • Included with every HostGuru plan • Official Cloudflare Partner
