In this presentation we explain how Layer 7 DDoS attacks work, attacks old-school as well as new-school techniques. We then propose an approach how to implement mitigations to protect your your company from these type of attacks and finally how to effectively test the mitigations by integrating DDoS Layer 7 security testing in your Continues Delivery / Continues Integration to server your DevOps teams.