Question 1

I'm under attack. What should I do?

Accepted Answer

Is your system under attack right now? Get immediate expert help. What happens next: • Connect with our security specialists instantly • Real-time attack analysis and threat identification • Custom security rules deployed to block the attack • Advanced protection activated immediately Don't wait: every second counts during an active attack. Get emergency support now: https://www.azion.com/en/lp/under-attack-mitigation/

Question 2

Do I need to set anything up to turn on DDoS protection?

Accepted Answer

No. DDoS Protection is always on for every Azion workload, with nothing to create or configure. For targeted attacks, you can add custom rules in Azion Firewall with WAF, Network Shield, Bot Manager, and rate limiting.

Question 3

Which DDoS attacks does Azion mitigate?

Accepted Answer

Attacks at the network (3), transport (4), and application (7) layers, such as SYN floods, UDP floods, ICMP floods, DNS floods, HTTP floods, HTTP slow reads, Slowloris, and amplification attacks such as NTP, SSDP, and CLDAP. Detection also catches BGP hijacking and IP spoofing.

Question 4

Is DDoS mitigation billed?

Accepted Answer

DDoS Protection is included with Firewall at no extra charge. Attack traffic dropped at layers 3 and 4 isn't even metered. Every other product is billed by its own usage metrics.

Question 5

How does Network Shield filter the traffic that reaches my application?

Accepted Answer

With Firewall rules that block or rate-limit requests by IP/CIDR, ASN, or country. You maintain the network lists those rules use in Console, the API, or the CLI.

Question 6

How does Origin Shield protect my origin?

Accepted Answer

Azion keeps an up-to-date list of its IPs for you to allow in your origin's firewall, which then refuses every other connection. A new IP only starts sending traffic 7 days after it joins the list, giving your automation time to update the firewall.

Question 7

Can I build custom security logic?

Accepted Answer

Yes. In the Azion Firewall Rules Engine, you use criteria such as path, cookies, headers, query strings, or network lists to decide what happens to each request: block it, rate-limit it, or run a function written in Functions. That function can even run AI inference on Azion's global infrastructure.

Question 8

Which certifications does Azion hold?

Accepted Answer

Azion holds SOC 2 Type 2, SOC 3, and PCI DSS certifications and meets GDPR and LGPD requirements. They demonstrate the operational controls that protect customers' applications, APIs, and data.

Unlimited protection against DDoS attacks

Mitigation in under 3 seconds

100+ data centers

100+ Tbps network capacity

100% availability SLA

Planet-scale defense

No performance trade-off

No zero-day exploits in 10 years

Instant hardening

Unified control plane

AI-native programmability

The security platform for applications, APIs, and AI agents

DDoS protection

Web Application Firewall

Bot management

Network protection

AI-programmable firewall

Azion DDoS Protection recognized in every 2026 G2 report

Leader in DDoS Protection in G2's Fall 2026 Report

Security and compliance for high-stakes digital experiences

Frequently asked questions