Managed WAF packaging, built around scope of service

Three managed-service packages, differentiated by how much of the security operation we run for you — not by an artificial feature paywall.

Pricing published at GA; early partners get founding terms.

Protected

Managed edge WAF, running on your domain.

  • Edge WAF on dual Coraza engines with OWASP CRS 4.26
  • PoW → CAPTCHA → Web Bot Auth challenge ladder
  • Full request audit trail in the portal
  • EU data residency, GDPR-native retention and deletion
  • Per-tenant Let's Encrypt certificates, issued automatically
Apply for Early Access

Managed

We tune the policy with you, month over month.

  • Everything in Protected
  • Monthly rule-tuning hours with our SecOps team
  • ML entity-scoring guided through detection → verify → enforce
  • Priority incident response
  • Onboarding call and periodic policy review
Apply for Early Access

Enterprise

Co-managed protection, scoped to your contract.

  • Everything in Managed
  • L3/L4 nftables early-drop tuning for volumetric events
  • Co-managed response with a dedicated window, agreed per contract
  • Custom log retention and deletion terms
  • Multi-domain and multi-team onboarding
Apply for Early Access

Pricing questions

Why are there no prices on this page?

We onboard early partners by hand today, so we set terms together rather than publishing a fixed list. Pricing goes public at general availability; partners who join during Early Access keep founding terms.

How do I get started — is there a signup flow?

There is no self-serve signup. You apply for Early Access, we talk through your setup, and we onboard you manually with a single DNS change. That is deliberate: managed protection means a human configures it, not a checkout page.

Does routing through your edge add latency?

Our design budget is ≤5 ms of added latency on normal traffic. Current figures are staging-measured and we will publish the methodology; we do not present any latency number as a production-fleet benchmark.

Where does my traffic and log data live?

On EU edge nodes (Hetzner, OVH, Scaleway) with GDPR-native data residency, configurable retention, and right-to-deletion. Your request metadata stays in-region by architecture.

Not sure which package fits?

Tell us your domain and traffic shape — we onboard early partners by hand and help you pick the scope.

Apply for Early Access