If you have an online company, then operating a website without DDOS protection is a gamble. IMO, it's worth spending a few extra dollars as an insurance policy. Like other forms of insurance, you hope to never have to use it, but it's worth having if you do.