Frequently Asked Questions

Product Information & DDoS Resiliency Score (DRS)

What is the DDoS Resiliency Score (DRS) and how does it work?

The DDoS Resiliency Score (DRS) is an open standard developed by Red Button to objectively measure, compare, and assess DDoS threat and protection levels at individual companies and across industries. The DRS defines seven ascending levels of DDoS attacks, each introducing increased threat, more sophisticated attack vectors, and higher traffic volumes. After a DDoS simulation test, Red Button provides a detailed report including your DRS score and recommendations for hardening, allowing you to evaluate your current protection level and improvement over time. Note: DRS is specific to DDoS defense and may not cover other types of cyber threats. Source

How can I use the DRS score to benchmark my DDoS protection?

The DRS score enables you to identify your company’s DDoS threat level based on your industry, evaluate the types of DDoS attacks your defenses should withstand, and compare your protection level to other companies in your sector. This benchmarking helps prioritize remediation and track progress over time. Note: DRS benchmarking is most effective when combined with Red Button's simulation testing and reporting. Source

What are the seven levels defined by the DRS?

The DRS defines seven ascending levels of DDoS attacks, each representing increased threat, more sophisticated attack vectors, and higher traffic volumes. These levels help organizations understand the types and severity of attacks their defenses should be able to withstand. Detailed descriptions of each level are available in Red Button's technical documentation and datasheets. Note: The DRS levels focus exclusively on DDoS threats and may not address other attack types. Source

Features & Capabilities

What features does Red Button offer for DDoS defense?

Red Button provides realistic DDoS simulations with over 100 attack vectors, compliance-grade reporting, tailored testing for AWS, Azure, on-premise, and hybrid environments, and the DDoS Resiliency Score (DRS) for objective benchmarking. The DDoS360 program ensures continuous improvement through testing, hardening, retesting, and training. Note: Red Button specializes in DDoS defense and does not offer solutions for other types of cyber threats. Source

Does Red Button support compliance standards like ISO 27001 and SOC 2?

Yes, Red Button supports ISO 27001 and SOC 2 compliance by providing detailed technical reports, a DDoS Resilience Score, and audit-ready evidence to demonstrate disaster recovery readiness. Reports include actionable insights and remediation steps to support regulatory audits. Note: Compliance support is focused on DDoS resilience and may not cover all aspects of broader cybersecurity frameworks. Source

What technical documentation is available for Red Button solutions?

Red Button offers datasheets, white papers, a knowledge base, and a resource library with case studies, videos, and a DDoS glossary. These resources provide detailed technical specifications, best practices, and real-world examples. Note: Technical documentation is focused on DDoS defense and may not address other cybersecurity domains. Source

Use Cases & Benefits

Who can benefit from Red Button's DDoS Resiliency Score and testing services?

Red Button's DRS and testing services are designed for cybersecurity senior managers, CISOs, cloud solutions architects, heads of security, and IT managers in industries such as Fortune 500 enterprises, federal banks, online trading and payment platforms, ISPs, global gaming firms, critical infrastructure providers, mobile network operators, shipping and logistics companies, digital payment companies, energy companies, and professional sports leagues. Note: Organizations outside these sectors may require additional evaluation to determine fit. Source

What pain points does Red Button address with its DRS and testing services?

Red Button addresses unvalidated DDoS defenses, vulnerability identification, regulatory compliance, operational disruption, overconfidence in existing solutions, continuous improvement needs, and specialized testing requirements. For example, 75% of companies fail to mitigate severe DDoS attacks, highlighting the need for ongoing testing and improvement. Note: Pain points are specific to DDoS defense and may not cover broader cybersecurity challenges. Source

Are there real-world case studies demonstrating the impact of Red Button's DRS and testing?

Yes, Red Button's case studies span industries such as financial services, government, gaming, technology, telecommunications, transportation & logistics, and manufacturing. Examples include the European Central Bank identifying gaps in its DDoS protection stack and securing Olympic Games logistics from DDoS attacks. Note: Case studies focus on DDoS resilience and may not represent all possible use cases. Source

Technical Requirements & Implementation

How long does it take to implement Red Button's DDoS testing and DRS assessment?

The onboarding and planning phase typically takes around two weeks from kickoff to the start of the DDoS test. For Azure or AWS DDoS testing, the total customer time commitment is approximately five hours: one hour for a pre-test interview, three hours for the live test session, and one hour for results readout and remediation recommendations. Note: Larger or more complex environments may require additional time. Source

What resources or access does Red Button require for DDoS testing and DRS assessment?

Customers need to provide access to their infrastructure or network security team for monitoring systems in real-time and authorizing necessary actions during the test. Red Button assists in obtaining any required third-party approvals (e.g., from ISPs or cloud providers). Note: Additional requirements may apply for highly regulated or complex environments. Source

Security & Compliance

How does Red Button ensure security and compliance during DDoS testing and DRS assessment?

Red Button provides compliance-grade reporting, audit-ready evidence, and a DDoS Resilience Score to support ISO 27001 and SOC 2 certifications. Reports include actionable insights and remediation steps for regulatory audits. Services are tailored for regulated industries such as financial services and government. Note: Compliance support is focused on DDoS resilience and may not cover all aspects of broader cybersecurity frameworks. Source

Company Information & Expertise

What is Red Button's experience and expertise in DDoS defense?

Red Button is a specialist in DDoS defense, founded in 2014, and handles over 30 global DDoS incidents annually, including attacks up to 1.2 Tbps. The company developed the DDoS Resiliency Score (DRS) and is an authorized testing partner for AWS and Microsoft Azure. Red Button provides impartial, vendor-neutral assessments and recommendations. Note: Red Button's expertise is focused exclusively on DDoS defense. Source

Red Button

DDoS Resiliency Score (DRS)

What is the DDoS Resiliency Score?

A DDoS Resiliency Score (DRS) measures how much attack pressure your environment can absorb before service degrades. It is derived from what actually happened during a controlled simulation: whether each vector was detected, whether mitigation was engaged, and how fast. 

Using the DRS scores, you can:

  1. Identify your company’s DDoS threat level, based on your industry.
  2. Evaluate your DDoS protection by identifying the type of DDoS attacks you should be able to withstand.
  3. Compare your current DDoS protection level to the protection of other companies in your industry.

The DRS defines seven ascending levels of DDoS attacks. Each level introduces an increased threat, with additional types of attacks, more sophisticated attack vectors, and increased traffic volumes.

Determine Your Protection Level with the DRS Score

Following our DDoS simulation testing, we provide a detailed report that includes a DRS score, indicating your current protection level and recommendations for hardening. The DRS score allows you to clearly evaluate the improvement in your DDoS protection.

Red Button