Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell: two critical PHP flaws affect most WordPress hosting. See if your site is affectedFlagged by our vulnerability database: PHP2Shell, two critical PHP flaws. DetailsFlagged: PHP2Shell. Check your site
HuttenlocherTechnologies

Security · 3 min read · Updated October 25, 2026

DDoS attacks and small business websites

Short answer: A DDoS attack floods a site with traffic until it stops answering. Small businesses are rarely targeted on purpose. When it does happen, a site served through a modern network usually rides it out without anyone noticing.

What it is

A distributed denial-of-service attack sends overwhelming traffic from many machines at once, usually a botnet of hacked devices, to knock a site or service offline. It doesn’t break in or steal data; it just makes the site unavailable while it lasts.

How likely is it?

Targeted attacks mostly hit larger companies, gaming, finance and organizations someone is angry at. A small business is more likely to go down from a hosting problem, an expired domain or certificate, or a hack than from a DDoS. Still, sites on cheap shared hosting can be knocked out as collateral when a neighbor is attacked.

Protection

  • Hosting served through a global network (CDN) that absorbs floods. Many offer this by default.
  • Monitoring, so you know immediately if the site stops answering.
  • Your booking, phone and Google listing details also available elsewhere, so customers can reach you if the site is down.

Written by Nikita Huttenlocher, founder and lead engineer at Huttenlocher Technologies, a web design and software company in Myrtle Beach, South Carolina.

Questions

Someone is threatening to DDoS us unless we pay. What do we do?

Don’t pay. Report it to the FBI at ic3.gov, make sure your site is behind DDoS protection, and call your hosting provider or us.

Are your sites protected?

Yes. Sites on our hosting are served through a global network that absorbs traffic floods, and our monitor checks them every five minutes.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?

No newsletter, no sales sequence. Just a reply.