I want to rent a botnet and point it at my own website + service stack so that I can better understand how they work and protect myself against it.
I’m looking for things like automated web scraping, targeted ddos, llm generated fake comments and stuff like that. Basically, I want to test my services against my stuff before I launch.
I don’t believe this is illegal as I’m targeting myself for education.
This is for my personal business prelaunch. I’m particularly interested in the “illegitimate” traffic. I have a suite of telemetry infrastructure to analyze incoming traffic and want to see what it produces before I don’t have the option to “turn off the traffic” because I’m not the one causing it.
I can outsource things like ddos protection to my cdn provider, but that would still be just kinda hoping I didn’t have any attackable surface I didn’t think of prelaunch.
In that case, I wonder if your money would be better spent on contracting a security review. If you’re worried about unknown attack surface, I’m not sure that funding organized crime to rent a botnet would help. Botnet operators rely on you to tell them what to attack, so you’re unlikely to discover anything new here. Better to hire a professional and get a fresh opinion.