Simple per-site pricing

The WAF that tells you what's safe to block.

Self-serve is $150/site/month or $1,650/year. 14-day trial at checkout — no charge if you cancel first.

Rules start in count. The dashboard names what's safe to block. You still click once.

Security and support · Uptime SLA · Privacy · How this compares

Monthly

$150/ site / mo

14-day trial, then month to month. Add or remove sites anytime; billing follows. Includes WAF Cybersecurity Advisor — you still click once to block.

Start a 14-day trial

Annual

$1,650/ site / yr

14-day trial, then one month free versus paying monthly. Same fully-managed WAF. Includes WAF Cybersecurity Advisor — you still click once to block.

Start a 14-day trial — annual

Card at Stripe checkout. Cancel before the 14-day trial ends and you won't be charged.

Cloudflare Business lists at $250 / month per zone, or $200/mo equivalent on annual prepay ($2,400/year). We are a managed WAF at $150/site — not a 30-product console.

How this compares

The WAF that tells you what's safe to block, next to the other ways people put a firewall in front of a site. We do not publish a do-it-yourself AWS bill, and we are not Cloudflare's product suite.

Who runs it

This product: We provision the edge, the certificate, and the WAF, then show you one dashboard.
AWS managed rules, in the console: You build the distribution, certificate, Web ACL, and logging, then maintain them per site.
Cloudflare: You configure the zone. Business is a large platform you operate yourself.
Doing it yourself: You read the counters and decide what to flip. Same idea, no operator in the loop.

What blocks on day one

This product: Rules start in count. Counted is not blocked. Nothing moves to block until you click Promote.
AWS managed rules, in the console: You choose count or block when you attach each rule group.
Cloudflare: You choose log or block for the rules you turn on.
Doing it yourself: Whatever mode you set. A mistake blocks real visitors immediately.

After about a day

This product: Tuning names Promote, Hold, or Needs allowlist from the count window. You still click once.
AWS managed rules, in the console: You read sampled logs and decide. There is no Promote button.
Cloudflare: You read the analytics for the configuration you built.
Doing it yourself: You keep a spreadsheet of what fired, or you guess.

Price

This product: $150/site/month or $1,650/site/year. 14-day trial. 300 GB and 5 million requests included, then overage.
AWS managed rules, in the console: AWS usage charges you assemble. We do not publish a do-it-yourself total.
Cloudflare: Business lists at $250 / month per zone, or $200/mo equivalent on annual prepay ($2,400/year).
Doing it yourself: Your time, plus whatever the underlying vendor bills.

Support and uptime

This product: Email support@wafcybersecurity.com. 99.9% monthly edge availability for Live sites. Below that target, and still at least 99.0%, the credit is 10% of that site's monthly fee on the next invoice. There is no public status page for customer edges.
AWS managed rules, in the console: AWS support if you buy a support plan. Their SLA is theirs, not ours.
Cloudflare: Cloudflare support on the plan you buy.
Doing it yourself: You are the on-call.

The Advisor reads your count window and explains what's safe to promote — you still click once. Rule-based checks on your own site's logs — the same evidence always gives the same answer. See an example Tuning panel. How we start: WAF count mode. Setup: DNS cutover to count. Scan grade: what the grade means. DIY vs managed: console burden or operator. Managed WAF pricing: is $150/site worth it. Concierge DNS: we point your site at the managed WAF. Also: Solutions · Blog.

Usage above the included amount

Each site includes 300 GB and 5M requests / month. Extra traffic is $0.15/GB and $3.00 per million requests. 99.9% edge SLA — service credits if we miss it.

Campus teams: Campus Estate — invoiced by Mac, not the $150 checkout.

What does a 403 mean?

A 403 is what visitors see after you promote a rule to block — not on day one. Rules start in count. After 24 hours, the Advisor explains what's safe; you still click once. See What a branded 403 looks like.

Campus Estate

Quote on request

Higher-ed / multi-site campus. Talk to sales team for a quote — we do not publish Estate list prices.

Concierge DNS
Named support (Mac / support@wafcybersecurity.com)
Quarterly threat/tuning review
Priority virtual-patch / count→promote workflow
WAF Cybersecurity Advisor

Estate Brain is a read-only cross-site view in the dashboard. The Advisor is included today. What it shows

Single sites and small shops stay on $150/site/mo with a 14-day trial. We do not put every campus domain through Estate.

Talk to sales team

Mac invoices. This is not the $150 Stripe checkout.

Refer a friend

Refer a site. You both get 10% off for 3 months. After that, full $150/site/mo (or $1,650/year). Applied at Stripe Checkout when a friend signs up with your link. How refer-a-friend works.