Moreover, I myself like the idea of being able to control everything from our own side, because Wordfence also only offers a self-hosted service here, which presupposes that you yourself and each of our customers has concluded or will conclude a contract processing agreement with Wordfence. To ensure that we always have an overview of all our websites and those of our customers, we use MainWP.

And here we are already at the first question

Have you already thought about partnering with MainWP or are you already doing so?

2. WAF
You write "firewall", but I can't find detailed information about it anywhere. How is it used? Web- or server-side? If the latter, how is it deployed?

3) In order to support a truly GDPR-compliant captcha service, you should consider "Friendly Captcha". The other services you use do not have servers in the EU, which do not make international calls and also have their headquarters in the USA. FC, on the other hand, is a German service and divides the data flow, which users can even control or separate themselves.

And finally, something that annoys me about all the web services that have been out there for years and think they have to hide. Where is your imprint? Where are the company details in the terms and conditions? Where are your privacy notices with the appropriate address to report violations?

At a quick glance, I can't tell where your company is based. The fact that this way of running a business on the internet has become established among companies outside of Europe suggests that no one cares about a legally secured day's work any more and that, past any security, it's all about selling and making money as quickly as possible.

To what extent do you comply with the GDPR? And please don't give me an answer like "Yes, we comply with the GDPR" and nothing else. The problem here is that many people from the EU believe that they can use any software as long as the publisher simply writes that it is compliant with the GDPR - but mostly the problem is that software publishers have no idea what it means to be GDPR compliant. Therefore, I would like to know in detail what mechanisms you use to be compliant with the GDPR.

Cheers
Steve