WAF pricing
WAF pricing that scales from one domain to enterprise traffic
Protect your domains, applications, and APIs with usage-based pricing — the same Free, Startup, Growth, Scale, and Enterprise ladder, metered by protected domains and monthly requests.
Test on a single domain.
- 1 Domains
- 100k Requests / mo
- Basic Rules
- 1 day Log retention
One to three production domains.
- 3 Domains
- 1M Requests / mo
- Standard Rules
- 7 days Log retention
A growing business with multiple sites.
- 10 Domains
- 10M Requests / mo
- Advanced Rules
- 30 days Log retention
High-traffic business.
- 25+ Domains
- 50M+ Requests / mo
- Advanced + custom Rules
- 90 days Log retention
Custom volume and SLA.
- Custom Domains
- Custom Requests / mo
- Custom Rules
- Custom Log retention
Indicative monthly pricing in EUR. Annual billing and custom volumes available — talk to us for a tailored quote.
Compare plans
Everything in WAF, tier by tier
| Feature | Free | Startup | Growth | Scale | Enterprise |
|---|---|---|---|---|---|
| Protected domains | 1 | 3 | 10 | 25+ | Custom |
| Monthly requests | 100k | 1M | 10M | 50M+ | Custom |
| Managed OWASP CRS rules | |||||
| Custom WAF rules | 5 | 25 | Unlimited | Unlimited | |
| Rate limiting | |||||
| Geo / IP rules | |||||
| Challenge page | |||||
| Bot signals | |||||
| API-aware protection | |||||
| Log retention | 1 day | 7 days | 30 days | 90 days | Custom |
| Alerting | |||||
| Team access | 1 | 3 | 10 | 25 | Custom |
| Uptime SLA | Custom | ||||
| Support | Community | Priority | Priority + onboarding | Dedicated |
What you're billed for
Usage meter
WAF pricing is based on the number of protected domains and the number of HTTP requests ArxLayer inspects for them each month. You pick a plan; if you exceed your monthly request allowance you can upgrade a tier or add request bundles.
Meter: Domains + requests
Overage
- Additional requestsIncluded: Your plan allowance€5 per extra 1M requests
- Additional domainIncluded: Your plan allowance€9 per extra domain / mo
Which plan should I choose?
Match the plan to your stage
Testing protection on a single domain.
One to three production domains.
A growing business with multiple sites.
High traffic and higher security needs.
Custom traffic, SLA, compliance, or advanced support.
Related
Often used together
FAQ
WAF pricing questions
- What counts as a request?
- Every HTTP request ArxLayer inspects for your protected domains counts toward your monthly request allowance, including requests it blocks as attacks.
- What happens if I exceed my request limit?
- You can upgrade to the next tier or add request bundles. We alert you before you reach your limit and never silently drop your protection.
- Can I protect more domains than my tier includes?
- Yes. Add extra domains as an overage, or move up a tier for a higher included allowance.
- Do you offer annual billing?
- Yes. Annual billing is available, and Enterprise plans are tailored to your traffic, SLA, and compliance needs.
Start protecting with WAF
Start free, then scale by usage. Upgrade a tier or add usage whenever you need to.