Non-Chinese Mainland Edition
Last updated:2026-03-13 10:08:07
The content of this document and billing standards apply only to regions not in the Chinese mainland. If your business is deployed in the Chinese mainland region, please refer to the Chinese mainland edition. The two editions differ in features and capabilities as well as billing models.
Instance Package Price Description
Product Type | Edition | Price (USD/Month) | Remark |
SaaS WAF / CLB WAF | Premium | 800 | SaaS WAF: After purchasing the WAF basic plan, you can upgrade the plan in Instance Management. Downgrading the plan is currently not supported. CLB WAF: Not available. |
| | Enterprise | 2180 |
| | Ultimate | 6380 |
| | Exclusive | |
Extended Configuration Price Description
Extra Domain Name Package
Details for the Domain Extension Package | Price |
A domain package can protect up to 10 domains, including one primary domain and its subdomainsadsdasd. | USD 285/month |
Extra Capacity Package (Extra QPS Package)
Details of the Business Extension Pack (QPS Extension Pack) | Price | | |
Each package for service expansion supports an additional 1000 QPS, and increases the protected bandwidth of SaaS-based instances by 25 Mbps. | USD 142/month | | Users who purchased WAF before September 27, 2023 |
Each extra capacity package supports an additional 1000 QPS, and increases the protected bandwidth of SaaS-based instances by 25 Mbps. | Advanced Edition | USD 350/month | Users who made their first purchase of WAF after September 27, 2023 |
| Enterprise | USD 480/month | |
| Ultimate | USD 600/month | |
Note:
After BOT traffic management or API security is enabled, the monthly unit price of each extra capacity package will increase by USD 300.
When the peak QPS of the capacity exceeds the QPS specification value for the instance, the instance may enter quarantine state in the sandbox according to the isolation mechanism for QPS overage. For instances entering quarantine state in the sandbox, WAF will no longer guarantee service SLA. For more information about the overage isolation mechanism, see Sandbox Isolation Status.
To avoid affecting your normal capacity operations, it is recommended to purchase extra capacity package promptly when capacity demands arise to scale up the instance QPS specification value. The expandable specifications for instances of different plan editions under each WAF type are as follows:
Instance Type | Edition | Maximum Purchasable Number of Extra Capacity Package (Maximum Expandable QPS) | Maximum Purchasable Number of Extra Capacity Package (Maximum Scalable Bandwidth) | Description |
SaaS-based WAF | Premium | 20 (20,000 QPS) | 20 (500 Mbps) | 1. If you need to purchase more customized packages for extra capacity package, please contact your commercial manager or directly Contact Us to customize the upgrade quantity of extra capacity package, including more QPS specifications for capacity protection or bandwidth specifications. 2. After the upgrade quantity of extra capacity package is customized, their sandbox quarantine threshold also falls under customized values. For detailed calculations, refer to Sandbox Isolation Status. |
| Enterprise | 30 (30,000 QPS) | 30 (750 Mbps) | |
| Ultimate | 40 (40,000 QPS) | 40 (1000 Mbps) | |
CLB WAF | Premium | 40 (40,000 QPS) | Not involved | |
| Enterprise | 60 (60,000 QPS) | | |
| Ultimate | 80 (80,000 QPS) | | |
Elastic Billing (Postpaid)
When the peak service QPS exceeds the instance QPS specification (default QPS specification of the plan version, or default QPS of the plan version + extended QPS specification of extra capacity package), you can further extend the instance QPS specification by enabling elastic billing.
When the peak service bandwidth of a SaaS-based WAF instance exceeds the measured bandwidth value, elastic billing can be enabled to extend the bandwidth specification for services of the SaaS-based WAF instance through postpaid bandwidth. The measured service bandwidth of the instance = default bandwidth specification of the plan version + (number of packs for capacity expansion * 1000 + actual postpaid QPS billing value) / 40.
Note:
The elastic billing for postpaid bandwidth is being gradually rolled out in batches. The specific supported time is subject to the update completion time on the purchase page.
By default, only the Hong Kong (China) region supports elastic billing. For other regions, please submit a ticket to apply for activation.
If multiple SaaS-based WAF or CLB-based WAF instances are purchased under the same account, the elastic protection consumption for each instance type is calculated independently, and the costs are settled independently.
If the peak actual QPS for capacity of an instance exceeds its QPS specification value, the instance may enter quarantine state according to the isolation mechanism for QPS overage. For instances entering Sandbox Quarantine State, WAF will no longer guarantee service SLA. For more information about the overage isolation mechanism, see Sandbox Isolation Status.
By purchasing packs for capacity expansion or enabling elastic protection, you can extend the QPS specification value of the instance. When the QPS specification value of the instance exceeds the peak service traffic during overage periods, the instance automatically ends the sandbox quarantine state.
When the peak actual service bandwidth of a SaaS-based WAF instance exceeds the measured bandwidth value, you can expand it by purchasing packs for capacity expansion or enabling elastic billing. If the peak service bandwidth exceeds the specification value for the instance bandwidth, bandwidth throttling may be triggered, affecting service stability.
Details of the Elastic Billing Details | Price |
The postpaid elastic billing for services supports basic security protection for business QPS exceeding the basic plan or the basic plan + extra capacity package. | USD 0.04/QPS/day |
The postpaid elastic billing for services supports basic security + BOT traffic management protection for QPS exceeding the base plan or the base plan + extra capacity package. | 0.0695 USD/QPS/day |
The postpaid elastic billing for services supports basic security + API security protection for QPS exceeding the basic plan or the basic plan + extra capacity package. | 0.0695 USD/QPS/day |
The postpaid elastic billing for services supports basic security + BOT traffic management + API security protection for QPS exceeding the basic plan or the basic plan + extra capacity package. | 0.0974 USD/QPS/day |
Bandwidth postpaid elastic billing: When the peak of actual service bandwidth for a SaaS WAF instance exceeds the measured bandwidth value, elastic expansion of the exceeded service bandwidth is supported to ensure the stability of connected services. | 1.5 USD/Mbps/day |
Plan Add-ons Feature Price Description
Mini Program Security and Protection
The billing for value-added feature of Mini Programs Security and Protection consists of the mini program business extension package, elastic billing for mini programs, and mini program node extension package.
Note:
Currently, only the Hong Kong (China) region outside the Chinese mainland supports purchasing and enabling the mini program security and protection. For other regions, please submit a ticket to apply for activation.
Mini Program Business Expansion Package
Details of the Mini Program Security and Protection Business Expansion Package | Purchase Quantity | Price |
Combining the access of Weixin Gateway, it supports WeChat mini programs' nearby security protection and dynamic acceleration capability, providing a unified security protection scheme for the mini program. Each mini program extension package includes 100 QPS and the corresponding access bandwidth of 2 Mbps. The Advanced Edition WAF instances with the feature enabled support the access of 3 mini programs by default. Editions later than the Advanced Edition support the access of 4 mini programs. To access more mini programs, you need to purchase the mini program node extension package. You can purchase up to 500 mini program security and protection extension packages at a time. If you require more packages, contact the business manager or us by submitting a Ticket. | 1 - 3 | USD 195 / unit / month |
| 4 - 5 | USD 185 / unit / month |
| 6 - 9 | USD 175 / unit / month |
| 10 - 49 units | USD 165 / unit / month |
| 50 - 99 units | USD 155 / unit / month |
| 100 - 499 units | USD 135 / unit / month |
| 500 - 999 units | USD 115 / unit / month |
| 1000 units or more | USD 95 / unit / month |
Mini Program Elastic Billing
When the peak QPS of a mini program accessing the mini program security and protection feature exceeds the QPS specification value purchased in the mini program business expansion package for the instance, you can enable elastic billing to further expand the supported QPS specification for protecting mini programs.
Details of Elastic Billing for Mini Programs | Purchase Quantity | Price |
Mini program security and protection elastic scaling is suitable for traffic protection against service peaks caused by inaccurate traffic assessment for mini program services, short-term business activities, or unexpected traffic surges. After this feature is enabled, postpaid protection beyond the capacity of the prepaid mini program service is supported to prevent business impact or degradation of protection capabilities. | 0 - 5000 QPS | USD 0.19 / QPS / day |
| 5001 - 10000 QPS | USD 0.17 / QPS / day |
| 10001 - 50000 QPS | USD 0.15 / QPS / day |
| 50001 - 100000 QPS | USD 0.13 / QPS / day |
| 100001 QPS or more | USD 0.11 / QPS / day |
Mini Program Node Expansion Package
If the number of mini programs requiring access exceeds the supported capacity of the instance edition, you can purchase an expansion pack for mini program nodes to further expand the number of protected mini programs.
Details of the Mini Program Node Expansion Pack | Price |
The expansion pack for mini program nodes is suitable for scenarios where more mini programs need to be accessed for protection. Each expansion pack purchased supports the access of one additional mini program. | USD 28 / unit / month |
Management of BOT Traffic
Details of the BOT Traffic Management | Price |
After purchase, users can identify and classify friendly and malicious bots through BOT Traffic Management, and implement targeted traffic management policies. For example, allowing search engine bot traffic while applying non-response, delayed response, or differentiated response strategies against malicious scraping of product information. This addresses resource consumption, data leakage, and invalid marketing caused by malicious bot crawling, while ensuring normal operation of friendly bots (such as search engines and advertising programs). | USD 2000 / month |
Note
After BOT traffic management is enabled, the monthly unit price of each extra capacity package will increase by USD 300.
API Security
After purchasing API Security, users can perform security analysis on relevant API assets and configure policies based on risks identified through traffic analysis. The pricing for enabling API Security across different instance editions is as follows:
Product type | Edition | API Security | Price (USD/Month) | Remark |
SaaS-based WAF | Premium | Enabled | 1890 | After a WAF Basic plan is purchased, you can upgrade your plan in Instance Management. Plan downgrades are currently not supported. |
| | Not enabled | 800 | |
| Enterprise | Enabled | 4500 | |
| | Not enabled | 2180 | |
| Ultimate | Enabled | 10650 | |
| | Not enabled | 6380 | |
| Exclusive | Enabled | | |
| | Not enabled | | |
CLB WAF | Premium | Enabled | 1890 | None. |
| | Not enabled | 800 | |
| Enterprise | Enabled | 4500 | |
| | Not enabled | 2180 | |
| Ultimate | Enabled | 10650 | |
| | Not enabled | 6380 | |
| Exclusive | Enabled | | |
| | Not enabled | | |
Note:
After API security is enabled, the monthly unit price of each extra capacity package will increase by USD 300.
Log Storage Package
Details of the Log Storage Package | Price |
A security log storage package includes: 1 TB of log storage capacity: You can search for and download access logs of domain names protected by SaaS WAF within the configured log retention period (up to 184 days). If the log size of the retention period exceeds the storage capacity, only 1 TB of logs can be queried and downloaded. | USD 150/month |
Note
The purchase quantity of log storage packages can be 2 to 500.
WAF supports adding third-level and fourth-level domain names, but each added third-level or fourth-level domain name will occupy one subdomain quota.To disable the auto-renewal of a domain package separately, please Contact Us for assistance.
To disable the QPS extension pack, locate the corresponding billing item in Renewal Management and cancel its renewal.
To disable the auto-renewal of a domain package separately, please Contact Us for assistance.
The log capacity of the security log storage package is recommended to be purchased based on business QPS usage. It is advised to purchase 1 TB of log capacity for every 800 QPS per month.Security log service packages are sold with a minimum quantity for orders of 2 and a maximum limit on purchases of 500 per transaction.
Log Shipping Service
The log shipping service is designed to collect and deliver logs generated by WAF (currently supports only the header fields of access logs) to the user's Tencent Cloud CLS service or Ckafka service.
Note
To use the log shipping service, you must purchase CLS or Ckafka instances in advance.
During log storage and delivery, WAF is billed based on the actual log size, with the unit of measurement being GB; The billing cycle is daily, meaning the fees for the usage generated on the same day will be billed and settled at 00:00 the next day. Currently, tiered pricing is supported based on the user's actual usage tiered pricing (This pricing does not include the fees for CLS or Ckafka). The specific prices are shown in the table below:
Daily Volume of Delivery (GB) | Price (USD/GB/Day) |
0 - 30 GB (exclusive of 30 GB) | 0.006 |
30 - 100 GB (exclusive of 100 GB) | 0.005 |
100 - 500 GB (exclusive of 500 GB) | 0.004 |
500 GB and above | 0.003 |
Note:
If any exceptions occur during log shipping , please Contact Us for assistance.
The feature of the log shipping service records logs in uncompressed format, and the WAF recorded value size differs from the CLS platform recorded value size.
The feature of the log shipping service does not conflict with the feature of the Security Service Log Package. You can purchase and use the log shipping service regardless of whether you have purchased the Security Service Log Package.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No
Feedback