- Release Notes and Announcements
- Release Notes
- Product Announcement
- Security Advisory
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44832)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-45046)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44228)
- Notice for WebLogic Console HTTP RCE Vulnerability
- Notice for Exchange Server Command Execution Vulnerability
- Notice for Yonyou GRP-U8 SQL Injection Vulnerability
- Notice for Apache Cocoon XXE Vulnerability (CVE-2020-11991)
- Notice for WordPress File Manager Arbitrary Code Execution Vulnerability
- Jenkins Security Advisory for September
- Notice for Apache Struts 2 RCE Vulnerabilities (CVE-2019-0230 and CVE-2019-0233)
- Notice for Apache SkyWalking SQL Injection Vulnerability (CVE-2020-13921)
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- FAQS
- Service Level Agreement
- WAF Policy
- Contact Us
- Glossary
- Release Notes and Announcements
- Release Notes
- Product Announcement
- Security Advisory
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44832)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-45046)
- Notice for Apache Log4j 2 RCE Vulnerability (CVE-2021-44228)
- Notice for WebLogic Console HTTP RCE Vulnerability
- Notice for Exchange Server Command Execution Vulnerability
- Notice for Yonyou GRP-U8 SQL Injection Vulnerability
- Notice for Apache Cocoon XXE Vulnerability (CVE-2020-11991)
- Notice for WordPress File Manager Arbitrary Code Execution Vulnerability
- Jenkins Security Advisory for September
- Notice for Apache Struts 2 RCE Vulnerabilities (CVE-2019-0230 and CVE-2019-0233)
- Notice for Apache SkyWalking SQL Injection Vulnerability (CVE-2020-13921)
- User Guide
- Product Introduction
- Purchase Guide
- Getting Started
- Operation Guide
- Best Practice
- FAQS
- Service Level Agreement
- WAF Policy
- Contact Us
- Glossary
Basic service plan pricing
Product type | Edition | Price (USD/Month) | Remark |
SaaS WAF | Premium | 550 | AI Engine is disabled by default. If you purchase a plan that includes this feature and you need to use it, please contact us. To upgrade the plan of an instance, please go to Instance management. Downgrading the plan is not supported. |
| | Enterprise | 1450 |
| | Ultimate | 4250 |
| | Exclusive | |
CLB WAF | Premium | 550 | N/A |
| | Enterprise | 1450 |
| | Ultimate | 4250 |
| | Exclusive | |
Extra package pricing
Extra domain packages
Specification | Price |
One extra domain package can be applied to up to ten domain names, including one domain name and nine subdomain names. | 285 USD/month |
Extra capacity packages
Specification | Price | Scope |
Each extra QPS package provides 1,000 QPS. For SaaS WAF instances, the bandwidth cap increases by 25 Mbps. | 142 USD/month | Existing WAF users before September 27, 2023 |
Each extra QPS package provides 1,000 QPS. For SaaS WAF instances, the bandwidth cap increases by 25 Mbps. | 275 USD/month | New WAF users since September 27, 2023 |
Add-on feature pricing
Bot management
Description | Price |
Bot management can identify good bots and bad bots, and process the traffic according to the customized policies. For example, you can let through the traffic of search engine bots. For requests from malicious crawlers, you can choose to ignore them, delay the responses, or adopt different response time periods. This feature reduces resource consumption, information leakage, and failed marketing caused by malicious bots and crawlers on the one hand and ensures normal operations of friendly ones (such as search engine bots and advertising programs) on the other hand. | 1300 USD/instance/month |
Note
Activating the Bot management feature will increase the price of extra capacity package.
The unit price of the extra capacity package will be increased by 275 USD/package/month
Bot extra capacity package (extra QPS package)
Description | Price |
Each extra QPS package provides 1000 QPS. | 500 USD/month |
Note
Bot extra capacity packages have been discontinued. To expand the QPS capacity, please contact your sales rep or subtmi a ticket.
API security
With API security, you can configure policies to handle risks found based on collected API traffic data.
Product type | Edition | API security | Price (USD/Month) | Remark |
SaaS WAF | Premium | Enabled | 1260 | Advanced Vulnerability Protection (AI Engine) is disabled by default. If you purchase a plan that supports this feature and you need to use it, please contact us. To upgrade the plan of an instance, please go to Instance management. Downgrading the plan is not supported. |
| | Not enabled | 550 | |
| Enterprise | Enabled | 3000 | |
| | Not enabled | 1450 | |
| Ultimate | Enabled | 7100 | |
| | Not enabled | 4250 | |
| Exclusive | Enabled | | |
| | Not enabled | | |
CLB WAF | Premium | Enabled | 1260 | N/A |
| | Not enabled | 550 | |
| Enterprise | Enabled | 3000 | |
| | Not enabled | 1450 | |
| Ultimate | Enabled | 7100 | |
| | Not enabled | 4250 | |
| Exclusive | Enabled | | |
| | Not enabled | | |
Note
Activating the API security will increase the price of extra capacity package.
The unit price of the extra capacity package will be increased by 275 USD/package/month
Log storage packages
Specification | Price |
Each log storage package contains:
1 TB of log storage capacity. You can search for and download access logs of protected domain names within the configured log retention period (1–180 days). If the log size of the retention period exceeds the storage capacity, up to 1 TB of logs can be queried and downloaded. | 75 USD/month |
Note
The purchase quantity of log storage packages can be 2 to 500.
WAF allows you to add third-level and fourth-level domain names. These domain names count toward the subdomain name quota.
To disable an extra QPS package, please go to Renewals and cancel the renewal of the item.
To disable the auto-renewal of an extra domain package, contact us.
We recommend you purchase one log storage package for every 800 QPS per month.
Log shipping
The objective of the log delivery service is to record and deliver the logs generated by WAF (currently only supports the header fields of access logs) to the user's Tencent Cloud CLS service or Ckafka service.
Note
It's anticipated that by late January 2024, the log delivery functionality will be launched. Upon launch, purchases and normal billing will be supported, with specific release timing being broadcasted through onsite messaging notifications.
The utilization of the log delivery service requires the prior purchase of CLS or CKafka instances.
During the process of log storage and delivery, WAF will bill on the basis of the actual log volume, with the unit of measurement being GB;The billing cycle runs daily, and the charges for the day's usage will be billed and settled at 00:00 the following day. Currently, stair-step pricing based on users' actual usage is supported (this pricing does not include the cost of CLS or CKafka). The specific pricing is as follows, as indicated by the table below:
Daily Delivery Volume (GB) | Price (USD/GB/Day) |
0–30 GB (excluding 30 GB) | 0.005 |
30–100 GB (excluding 100 GB) | 0.004 |
100-500 GB (excluding 500 GB) | 0.003 |
500 GB and above | 0.002 |
Note
If abnormalities occur whilst using the log delivery service, please contact us for resolution.
The logs recorded by the log delivery service function are in an uncompressed format, hence the size of the WAF record values is different from the record values size on the CLS platform.
The log delivery service function does not conflict with the security services log package function, regardless of whether the security services log package is purchased, you can purchase and utilize the log delivery service.
Yes
No
Was this page helpful?