tencent cloud

Web Application Firewall

DocumentationWeb Application FirewallPurchase GuideBilling OverviewChinese Mainland Edition

Chinese Mainland Edition

PDF
Focus Mode
Font Size
Last updated: 2026-04-10 10:42:36
The content of this document and the pricing standards are only applicable to the Chinese mainland. If your business is deployed outside the Chinese mainland, please refer to the Non-Chinese mainland edition, as the two editions differ in features and billing models.his documen

Instance Package Price Description

Product Type
Edition
Price (USD/Month)
Remark
SaaS WAF / Cloud-native WAF
Premium
550
SaaS WAF: AI Engine is disabled by default. If you purchase a plan that includes this feature and you need to use it, please Contact Us.
To upgrade the plan of an instance, please go to Instance Management. Downgrading the plan is not supported.
Cloud-native WAF: N/A.
Enterprise Edition
1,450
Ultimate
4,250
Exclusive
Pricing is only available upon submission of a ticket.

Plan Add-ons Feature Price Description

Mini Program Security and Protection

The billing for value-added feature of mini program security and protection consists of the mini program business extension package, elastic billing for mini programs, and mini program node extension package.

Mini Program Business Extension Package

Details of the Mini Program Protection Business Expansion Package
Purchase Quantity
Price
Combining WeChat security gateway connection, it supports nearby security protection and dynamic acceleration capabilities for WeChat mini programs, providing a unified mini program security protection solution. Each mini program extension package includes 100 QPS and corresponding access bandwidth of 2 Mbps.
The Advanced Edition enables mini program security protection by default and supports access to 3 mini programs. The Enterprise Edition and above editions support access to 4 mini programs. If you need to access more mini programs, you must purchase a mini program node extension package.
You can purchase up to 500 mini program security protection extension packages at a time. If you need more, please contact our business manager or reach out to us via ticket.
1 - 3 mini programs
USD 150 / unit / month
4 - 5 mini programs
USD 145 / unit / month
6 - 9 mini programs
USD 140 / unit / month
10 - 49 mini programs
USD 130 / unit / month
50 - 99 mini programs
USD 120 / unit / month
100 - 499 mini programs
USD 105 / unit / month
500 - 999 mini programs
USD 90 / unit / month
1,000 units and above
USD 75 / unit / month

Mini Program Elastic Billing

When the peak QPS of a mini program accessing the mini program security and protection feature exceeds the QPS specification value purchased in the Business Expansion Package for Mini Programs of the instance, you can enable elastic billing to further expand the supported QPS specification for mini program security and protection.
Details of the Elastic Billing for Mini Program
Purchase Quantity
Price
Mini program security and protection elastic scaling is suitable for traffic protection against service peaks caused by inaccurate traffic assessment for mini program security and protection, short-term business activities, or unexpected traffic surges. After this feature is enabled, postpaid protection beyond the capacity of the prepaid mini program service is supported to prevent business impact or degradation of protection capabilities.
0 - 5,000QPS
USD 0.15 / QPS / day
5,001 - 10,000QPS
USD 0.13 / QPS / day
10,001 - 50,000QPS
USD 0.12 / QPS / day
50,001 - 100,000QPS
USD 0.1 / QPS / day
100,001 QPS and above
USD 0.09 / QPS / day

Expansion Mini Program Node Package

If the number of mini programs requiring access exceeds the supported capacity of the instance edition, you can purchase an expansion pack for mini program nodes to further expand the number of mini program security and protection.
Details of the Expansion Pack for Mini Program Node
Price
The expansion pack for mini program nodes is suitable for scenarios where more mini programs need to be accessed for protection. Each expansion pack purchased supports the access of one additional mini program.
USD 26/unit/month

BOT Traffic Management

Details of the BOT Traffic Management
Price
After purchase, users can identify and classify friendly and malicious bots through BOT Traffic Management, and implement targeted traffic management policies. For example, allowing search engine bot traffic while applying non-response, delayed response, or differentiated response strategies against malicious scraping of product information. This addresses resource consumption, data leakage, and invalid marketing caused by malicious bot crawling, while ensuring normal operation of friendly bots (such as search engines and advertising programs).
USD 1,300/instance/month
Note
After BOT Traffic Management is enabled, the monthly unit price of each business expansion pack increases by USD 275.

API Security

After purchasing API Security, users can perform security analysis on relevant API assets and configure policies based on risks identified through traffic analysis. The pricing for enabling API Security across different instance editions is as follows:
Product Type
Edition
API Security
Price (USD/Month)
Remark
SaaS WAF
Premium
Enabled
1,260
The feature for Advanced Vulnerability Protection (AI Engine) is not enabled by default. If your purchased plan includes this feature and you wish to use it, please Contact Us to enable it.
After purchasing a WAF Basic plan, you can upgrade your plan in Instance Management. Plan downgrades are currently not supported.
Not enabled
5,50
Enterprise
Enabled
3,000
Not enabled
1,450
Ultimate
Enabled
7,100
Not enabled
4,250
Exclusive
Enabled
Pricing is only available upon submission of a ticket.
Not enabled
Cloud Native WAF
Premium
Enabled
1,260
None.
Not enabled
550
Enterprise
Enabled
3,000
Not enabled
1,450
Ultimate
Enabled
7,100
Not enabled
4,250
Exclusive
Enabled
Pricing is only available upon submission of a ticket.
Not enabled
Note:
After API security is enabled, the monthly unit price of each business extension pack increases by USD 275.

Log Storage Package

Details of the Log Storage Package
Price
A security log storage package includes:
1 TB of log storage capacity: You can search for and download access logs of domain names protected by SaaS WAF within the configured log retention period (up to 184 days). If the log size of the retention period exceeds the storage capacity, only 1 TB of logs can be queried and downloaded.
USD 75/month
Note
Security log storage packages are sold with a minimum order quantity of 2 and a maximum purchase quantity of 500 per transaction.
WAF supports adding third-level and fourth-level domain names, but each added third-level or fourth-level domain name will occupy one subdomain quota.
To disable the QPS extension pack, locate the corresponding billing item in Renewal Management and cancel its renewal.
If you need to disable the automatic renewal of the domain package separately, please contact us for assistance.
The log capacity of the security log storage package is recommended to be purchased based on business QPS usage. It is recommended to purchase 1 TB of log capacity for every 800 QPS per month.

Log Shipping Service

The log shipping service is designed to collect and deliver logs generated by WAF (currently supports only the header fields of access logs) to the user's Tencent Cloud CLS service or Ckafka service.
Note
To use the log shipping service, you must purchase CLS or Ckafka instances in advance.
During log storage and delivery, WAF is billed based on the actual log size, with the unit of measurement being GB; The billing cycle is daily, meaning the fees for the usage generated on the same day will be billed and settled at 00:00 the next day. Currently, tiered pricing is supported based on the user's actual usage tiered pricing (This pricing does not include the fees for CLS or Ckafka). The specific prices are shown in the table below:
Daily Delivery Volume (GB)
Price (USD/GB/Day)
0 - 29GB
0.005
30 - 99GB
0.004
100 - 499GB
0.003
500GB and above
0.002
Note:
If any exceptions occur during log shipping, please contact us for assistance.
The feature of the log shipping service records logs in uncompressed format, and the size of the value recorded by WAF differs from the size of the value recorded by the CLS platform.
The log shipping service feature does not conflict with the Security Service Log Package feature. You can purchase and use the log shipping service regardless of whether you have purchased the Security Service Log Package.

Extended Configuration Price Description

Extra Domain Name Package

Details of the Extra Domain Name Package
Price
Each extra domain name package can protect up to 10 domain names, including 1 primary domain name and its subdomains, totaling 10.
USD 285/month

Extra Capacity Package (Extra QPS Package)

Details of the Extra Capacity Package (QPS Extension Package)
Price
Remark
Each service expansion pack supports expanding and increasing 1,000 QPS, while also expanding the protection service bandwidth of SaaS-based instances by 25 Mbps.
USD 142/month
Users who purchased WAF before September 27, 2023
Each service expansion pack supports expanding and increasing 1,000 QPS, while also expanding the protection service bandwidth of SaaS-based instances by 25 Mbps.
USD 275/month
Users who made their first purchase of WAF after September 27, 2023
Note
Enabling BOT traffic management or API security increases the monthly unit price of each service expansion pack by USD 275.

Exclusive IP

Note:
Only SaaS WAF supports exclusive IP. If you need to enable it, please submit a ticket or contact your dedicated account manager to apply for purchase.
Dxclusive IP
Price
Exclusive IP resources can be allocated to specific domains to meet customized requirements for business stability, network performance, and resource exclusivity. Exclusive IP address does not guarantee a fixed VIP, and each enable or disable operation may result in VIP address changes.
A single instance can purchase up to 100 exclusive IPs.
USD 30 / month / unit
Previous Topic: OverviewNext Topic: Non-Chinese Mainland Edition

Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback