Unlike one of the user's review below, I wouldn't say this is a complete security suite. I am using Cloudfilt in conjunction with Cloudflare's DDOS protection and firewall. I was using Cloudflare's Bot Protection prior to trying out Cloudfilt. For the time being I've disabled the Cloudflare Bot protection to see how effective Cloudfilt is.

I must say it's certainly working. Have seen SPAM form submissions gone down. But that's where it stops. I wish Cloudfilt included WAF or a basic firewall that allowed some custom rules to compliment the Bot protection. Sadly, they don't. But in their defense, lifetime bot protection at this price point is a good deal. Can't complain about that.

Things that I like:
- Easy to install. I don't have WordPress but was able to add their PHP code into our pages. It took some time to add the codes in 40 odd pages.
- Haven't noticed any slowdowns or overheads after adding the code. I guess we'll have to wait & see the performance some day when their servers gets overloaded.
- You've got the option to add a whole ASN or host in your white/black list. Helps you save a lot of time instead of adding individual IP addresses.
- IP addresses that you add to your whitelist or blacklist do not count towards your monthly request. That's awesome.

Things that could improve
- If you are using a reverse proxy, your host IP shows up in Cloudfilt logs as someone accessing the site from the backend and it may show up as a Malicious connection. You have to manually add the IP into their 'Website/Proxy' address list box. This step can only be done after the site is added and successfully verified. My recommendation will be.. Cloudfilt should ask the site/proxy IP addresses WHILE the user is creating/adding a new site & automatically take those IP off the malicious list. That would save some hassle.
- Didn't have a good FIRST run with their support team. Their chat widget showed they are online and ready to chat. But when I initiated a conversation, never received any response. However, all my following interactions with the support team were answered instantly.

One more thing that's missing is we cannot customize their Ban page (the page that shows up when an IP is blocked). The current page carries heavy branding of Cloudfilt. But I've been advised they are working on this feature and they'll let users customize the Ban page soon. :)

For the price we are paying here at AppSumo, its a good service to have. The feature set and the protection level should work for small websites and personal projects. However am not confident yet to use Cloudfilt on production sites. In saying that, am using it on one of our sites to test them out. And I hope my opinion & confidence in them will improve in coming months.