How do you protect against bot and DDoS attacks?

ZITADEL offers different levels of protection against bot and DDoS attacks depending on your deployment model:

ZITADEL Cloud:

We leverage the robust security infrastructure of Google Cloud Armor to safeguard against these threats. This includes features like: - Web Application Firewall (WAF) to filter malicious traffic. - DDoS protection to absorb and mitigate volumetric attacks. - Bot management to identify and block automated bots.

Self-Hosted ZITADEL:

You are responsible for the security of your infrastructure. This means: - Implementing your own DDoS mitigation solutions. - Setting up bot detection and prevention mechanisms. - Regularly updating and patching your systems. - Monitoring for suspicious activity.

While ZITADEL Cloud handles these security aspects for you, a self-hosted setup provides more flexibility and control. However, it also requires you to invest in the necessary tools and expertise to ensure the protection of your ZITADEL instance.