Built in WAF, DDoS mitigation, malware scanning, and automatic patching.