Skip to content

Help Centre › Security and Armor

How do I protect my site from DDoS attacks?

Put Cloudflare in front of your site so attack traffic is filtered before it reaches your server. With Tremhost that means Armor Guard from $9 a month, or Armor Shield for sites that take payments. Our web hosting plans and dedicated servers also have DDoS protection at server level.

What you already have

ServiceDDoS protection included
Web hosting (every plan)Imunify360 server security with DDoS protection
Managed WordPressCloudflare Pro on every site
The Big MikeCloudflare Pro for your main domain
Dedicated serversAlways-on volumetric DDoS mitigation
KVM VPS and managed cPanel VPSAsk us what applies to your server, and add Armor for website traffic

Add Cloudflare in front of the site

  1. Pick a level. Armor Guard ($9 a month) gives one site a Cloudflare Pro-grade firewall, DDoS protection and CDN. Armor Shield ($200 a month per site) adds Cloudflare Business-grade protection with no traffic ceiling, for sites that cannot go down.
  2. Order it and give us DNS access. See How do I put Cloudflare in front of my site through Tremhost?
  3. Keep your server’s address private. Cloudflare only helps if attackers can’t go round it. Remove DNS records you no longer use that point straight at the server, and don’t publish the server’s IP address. If attacks keep reaching the server directly, tell us.
  4. During an attack, raise the shield. Cloudflare’s I’m Under Attack mode shows each visitor a short check before letting them in. Ask us to switch it on while the attack lasts and off again afterwards, because it slows the first visit.

If you are under attack right now

Message us on WhatsApp with the domain and what you see. Outside office hours, open a support ticket marked urgent: it is the first thing picked up. Say whether the site is down for everyone, so it is handled as critical.

A DDoS attack floods your site with traffic; it doesn’t change your pages. If your site shows pages you never wrote or redirects visitors elsewhere, it has been hacked: see Armor SOS.

Does the SLA cover downtime caused by an attack?
Not normally. Our Service Level Agreement lists DDoS and other external attacks as excluded downtime, subject to the protection you have bought. That is one more reason to put Cloudflare in front of a site you depend on.
Is there an uptime guarantee with Armor Shield?
Cloudflare’s Business plan carries a 100% uptime SLA, and it applies to Armor Shield. Those are Cloudflare’s terms, not Tremhost’s.

Still stuck? Open a support ticket or message us on WhatsApp +263 73 563 9917, Monday to Friday, 08:00–17:00 CAT.

Updated 6 November 2026. Something here out of date? Tell us.

Ask us on WhatsApp