Pricing
Per-protected-asset. No per-rule billing.
One predictable price per app you protect. WAF rules, IOC manifests, mitigation events are all included. Cloud egress is pass-through.
Shield Starter
$499 /mo per protected asset
WAF + DDoS + Bots + DNS. Great for a single high-value app.
- Up to 50M requests / mo
- Managed WAF + custom rules
- L3-L7 DDoS (anycast)
- Standard bot management
- Authoritative DNS + DNSSEC
- 8x5 support
Shield Business
$2,499 /mo per protected asset
Adds Account Protector, Client-Side, ZTNA, Microsegmentation.
- Up to 500M requests / mo
- Everything in Starter
- Account Protector (ATO + creds)
- Client-Side (PCI-DSS v4)
- ZTNA + microsegmentation
- 24x7 support
Shield Enterprise
Custom
Premium transit-layer scrubbing, DSPM, workflows and a dedicated response team.
- Unlimited requests
- Everything in Business
- Premium transit-layer scrubbing
- DSPM + data classifiers
- Workflows / SOAR runbooks
- Proactive incident response
- Dedicated SOC liaison
Premium transit-layer scrubbing is bundled in Enterprise. On Starter/Business it is available as an opt-in pass-through add-on.