Some of the key security features you should be on the lookout for are secure socket layer certificates, distributed denial of service protections and web application firewalls.  SSL certificates are a form of cryptographic protocols that encrypt and authenticate data between servers, machines and applications operating within a network. These are like a coded language between the server your site is hosted on and the computer of a visitor. Only your server and your visitor's computer have the keys to the coded language, ensuring no one intercepts any of your or your visitor's data. A DDoS attack is a flood of traffic to your site that overwhelms and shuts down your site, and potentially the sites of others depending on your hosting plan. Imagine you hang your art up in a coffee shop, for example, and someone doesn't like your art so they convince hundreds of thousands of protesters to swarm the shop to stop anyone from seeing your art. Not only can most people not see your art because of the crowd, but people can't see other artist's work either. Having DDoS protections in place helps monitor your site's traffic for anything suspicious, and stops DDoS attacks from happening before they cause significant damage. A WAF is a layer of security on your site that filters, monitors and blocks malicious traffic from accessing your site. You have hung your art up, and in order to protect your art and anyone who's come to see it, the gallery has hired a bouncer to pat down people as they walk in to see your art. The bouncer is the WAF. If traffic looks suspicious, the WAF blocks it.