In reply to Ryan Hellyer.

Hey Ryan-- we hear from our users over and over again that BruteProtect actually creates fairly substantial load reduction when a site is under attack. Our API calls are cached, so you're not having to make a new API request on every connection, and once an IP block is established, we're able to block login attempts very early in the WP load, reducing the number of database calls by 80%+