How MSPs Can Offer DDoS Protection
as a Managed Service

Back to Blog

The MSP Opportunity

MSP cybersecurity revenue is growing at 18% annually, and DDoS protection is a natural addition to the stack. Your clients already trust you with their infrastructure monitoring, backup, and security. Adding DDoS detection closes a gap that most MSPs leave unaddressed.

The economics work well. Flowtriq costs $9.99/node/month wholesale. Most MSPs charge $25-50/month per server for managed DDoS protection. On a portfolio of 200 client servers with 60% adoption, that is $3,000-6,000/month in recurring revenue with healthy margins and minimal operational overhead.

White-Label Setup

Flowtriq's white-label mode removes all Flowtriq branding from client-facing interfaces:

• Custom dashboard domain: Point ddos.yourmsp.com at the Flowtriq dashboard. Clients access their portal at your domain.
• Custom branding: Your logo, colors, and company name throughout the dashboard
• Custom email sender: DDoS alerts and reports come from [email protected]
• Custom status pages: Incident status pages use your branding
• Custom API domain: API calls go through your domain for clients who integrate programmatically

Your clients see your brand everywhere. They think of DDoS protection as a capability your MSP provides, not a third-party tool you resell.

Multi-Tenant Architecture

Each MSP client gets their own workspace in the Flowtriq dashboard. Workspaces are fully isolated:

• Client A cannot see Client B's nodes, traffic, or incidents
• Each workspace has its own alert configuration, escalation policies, and user accounts
• You maintain a master view across all client workspaces
• Per-client reporting for monthly reviews

The master view is where your NOC/SOC team operates. You see all client nodes, all incidents, and all alerts in a unified dashboard. When an alert fires, you know which client is affected and can respond without switching between client portals.

Pricing Models

Per-server pricing

Charge a flat monthly fee per protected server. Simple to quote, simple to bill. Works well for clients with predictable server counts.

1-10 servers:    $29.99/server/month
11-50 servers:   $24.99/server/month
51+ servers:     $19.99/server/month

Tiered service levels

Offer multiple tiers with increasing capabilities:

Tier 1 - Detection:  $19.99/server/month
  Real-time detection + alerts + monthly report

Tier 2 - Protection: $34.99/server/month
  Detection + automated mitigation + PCAP forensics

Tier 3 - Managed:    $49.99/server/month
  Protection + 24/7 monitoring + incident response + SLA

Bundled with other MSP services

Include DDoS protection in your managed infrastructure bundles. This increases the bundle value and stickiness without requiring a separate purchase decision from the client.

Client Reporting

Monthly reports are essential for demonstrating value. Flowtriq generates per-client reports showing:

• Total incidents detected and mitigated during the period
• Attack types, severity distribution, and peak traffic volumes
• Detection time and mitigation time metrics (SLA compliance)
• Traffic trend analysis and baseline changes
• Recommendations for additional protection

These reports justify the monthly fee. When a client asks "what am I paying for," you show them: "We detected and mitigated 3 DDoS attacks last month. The largest was a 2.1 Gbps UDP amplification flood. Your services stayed online throughout."

Getting Started

1. Sign up for a Flowtriq account with white-label enabled
2. Configure your custom branding and domain
3. Create client workspaces for your first clients
4. Install ftagent on client servers (pip install ftagent && sudo ftagent --setup)
5. Configure alert routing to your NOC and per-client notification channels

The entire setup for a new client takes about 15 minutes per server. Most of that time is the agent installation. Dashboard configuration and workspace setup is done from the web interface.

Back to Blog

Related Articles