Picture 6pm on a Friday: your offer just went out, the phone should be ringing, and instead your site sits dead because nobody set up DDoS protection. A DDoS attack floods your site with fake requests until real customers cannot get through, and every minute of downtime is a missed call.
The fix is quick and free. Point your domain at Cloudflare and its free tier soaks up the common floods before they reach your host.
The practical fix (step by step)
More doing than reading. Once traffic routes through Cloudflare, its free tier does the heavy lifting.
- Create a free Cloudflare account and add your domain.
- Swap your nameservers to the two Cloudflare gives you, in your registrar dashboard.
- Turn the orange cloud on so traffic goes through Cloudflare, not straight to your server.
- Switch on Always Use HTTPS and Bot Fight Mode, and set the security level to Medium.
- Add it to your monthly review so it does not quietly regress.
For what Cloudflare offers a UK small business beyond this, that breakdown is worth a read.
Three traps to dodge
- Leaving your origin IP exposed. If attackers find your real server address they route around Cloudflare. Keep the orange cloud on.
- Skipping the baseline. Note your normal traffic first, or you cannot tell a real attack from a busy Tuesday.
- Treating it as done. DDoS protection is a setting you maintain, not a switch you flip once.
Build on this
DDoS cover is one layer. Backups, SSL and a solid host are the rest, and the pillar guide on security and backups ties them together. Our website hosting guide is the hub. And if you are weighing where to deploy, the Netlify, Vercel and Cloudflare Pages comparison covers hosts with mitigation built in, while what UK hosting costs in 2025 keeps the budget honest.
Cutting through the noise
Free tier protection covers more than most owners expect. Cloudflare's free plan gives unmetered DDoS protection on the same network that shields huge sites, at no cost to a plumber in Leeds or a salon in Bristol. Owners skip it because the big stuff, the homepage, the logo, feels more urgent, an offline site converts at zero.
Uptime feeds trust, and trust feeds local search. The BrightLocal 2024 Local Consumer Review Survey and Moz Local Search Ranking Factors both publish UK-applicable research on how a reliable presence sways local buyers. If you run a shop, a static store versus WordPress shifts your exposure too. Want it handled? We fold it into our hosting and support, and you can see the pricing first.
Related cluster posts
From the same pillar, these dig into adjacent subtopics:
