Does the hosting include any 24-7 monitoring / DDoS protection?

Deployment runs on Microsoft Azure with integrated SIEM, Cloudflare CDN/WAF at the edge and managed observability for application and infrastructure events.