But isn't that software you download and run in your own environment?

I'm mostly not following what is under a DDoS attack. Is it their web page mostly consisting of marketing material with static pages?