There hasnt been any security issue reported yet. It's still beta. But, I can assure you, security should be your last worries with xF. <-- to hacking.. as for DDoS... not sure since that would be up to your firewall and hosting company more so than xF.