Valid point, and something I considered initially. However we've a security startup – the likelihood hood of us getting a huge wave of visitors, the hug of deat

Valid point, and something I considered initially. However we've a security startup – the likelihood hood of us getting a huge wave of visitors, the hug of death, is highly unlikely. Our landing page is static & anything remotely intensive requires an account. We are more likely to be hit by a DDoS, which I would hate to consume by upscaling servers and burning any potential profits we have. Additionally, I have multiple alerts setup for any signs of downtime, so that any deployment can be invoked as soon as possible. However, I completely understand your perspective, and if this was a different type of startup or industry, I would probably implement it the way you mentioned.