DDoS Protection
as a Managed Service

The Problem

You manage dozens of clients. One of them just got DDoS'd.

MSPs manage infrastructure across many clients, each with different server counts, network configurations, and SLA requirements. When a client gets hit with a volumetric attack, the MSP is the first call. The client doesn't know what's happening -- they just know their site is down and they're losing money.

Without automated detection, your team is reactive. Someone notices high CPU or packet loss, logs into the server, runs tcpdump, tries to identify the attack vector, and eventually applies a manual firewall rule. By the time you've mitigated, the client has been down for 20 minutes and your SLA is blown.

Flowtriq turns DDoS response from a fire drill into an automated workflow. Detection fires in under one second, your team gets alerted instantly, the client's status page updates automatically, and the full mitigation chain (local firewall rules, BGP FlowSpec, and cloud scrubbing) triggers without human intervention.

Architecture

One workspace per client. Full isolation. Central oversight.

Flowtriq's multi-workspace architecture is purpose-built for MSPs. Create a separate workspace for each client with their own nodes, incidents, alert channels, and status page. Your MSP team gets admin access to every workspace while clients see only their own data.

Each workspace is fully isolated -- Client A never sees Client B's traffic data, incidents, or PCAPs. But your NOC team can switch between workspaces in one click, giving you a unified view of every client's security posture without any data leakage.

Onboarding

Add a new client in under 10 minutes

Onboarding a new client to Flowtriq takes three steps: create a workspace, install the agent on their servers, and configure alert channels. The entire process takes less than 10 minutes per client, regardless of how many servers they have.

Once onboarded, the agent begins learning the client's traffic baseline immediately. Within 24 hours, Flowtriq has a statistical model of normal traffic patterns for every monitored interface. No tuning, no manual threshold setting, no per-client configuration files.

Revenue

Turn DDoS detection into a profit center

DDoS monitoring is a natural upsell in any managed services contract. Your clients already trust you with their infrastructure -- adding real-time attack detection to your service catalog is a straightforward value-add that most clients will accept without hesitation.

You pay Flowtriq $9.99 per node per month (or $7.99/node on annual billing). You set your own pricing to clients. Most MSPs charge $15-30 per server per month for DDoS monitoring, creating healthy margin on every node.

With 50 client servers, that's $500/month to Flowtriq and $750-1,500/month from clients. The service runs itself -- fully automated detection, alerting, and mitigation with zero manual overhead per incident.

White-Label

Sell it as yours. $7.99/node.

White-label the entire Flowtriq platform under your MSP brand. Your clients log into your domain, see your logo, and contact your support team. They never know Flowtriq exists.

The economics: You pay $7.99/node/month. Most MSPs bill clients $15–30/server. That's 50–75% margin on a service that runs itself.

What's included: Custom domain via CNAME, full visual rebrand (logo, favicon, colors, fonts), branded login page, custom CSS overrides, and custom support links. One-time $200 deposit that's applied as billing credit.

Or use it internally: Not every MSP wants to resell. You can also run Flowtriq at $9.99/node as an internal NOC tool — monitor client infrastructure without exposing any dashboard to clients. Use status pages and incident reports for client-facing communication instead.