Bubble apps are configured to minimize DDoS attack surface, following the principle of least privilege with our standard API configurations. For more information on API security, please see our technical documentation.

Bubble uses Cloudflare and an in-house system to monitor, track, and block even the most granular attacks. By hosting an app on Bubble, you benefit from industry-standard DDoS protection as well as support from our team in the event that any concerns arise.