A signed key, checked offline
You paste the key into the console. It is checked by a signature on your machine: no network call, no “phone home”.
Licences and editions
Two free editions (Free and Free +), which can be used professionally too, and paid offers. A licence is a signed key, checked on your own machine, offline: nothing is sent anywhere to check it.
Where to find it in the console : Console: Administration > Fleet and licence (see the offers); offers and prices: the Pricing page of this site.
What it is for
Free, usable professionally
Free (no sign-up, no account, no key) and Free + (a free sign-up and activation) may serve a business, a client's sites or a site that earns income, within their limits.
Visible, never hidden or broken
A function outside your licence stays in the menu and on its page, marked “Licence required”. You can read it, not configure it. A value already set keeps working.
The data plane never looks at the licence
A quota reached or a licence that expires never cuts traffic: only the control plane applies the limits.
What is and is not limited
Offers, prices and ceilings are on the Pricing page; here, how it works.
Protection is never reduced
WAF protection, two-factor authentication and security updates are included in every offer, free ones included.
Ceilings per offer
Protected sites, WAF nodes, users, organisations and, for the free offers, requests per month. Ceilings apply to the whole offer, not to each server.
Functions under licence
Advanced functions (integrations, off-site backup, advanced load balancing, advanced API, advanced IP and geo, definitions, automatic rules, monitoring, mail gateway…) belong to a paid offer.
A clear error
A change refused for lack of a licence answers TW-8033; a ceiling reached answers TW-8008. Both messages say what is limiting and what to do.
A reseller has its own licence
The Agency and Agency Max offers include managing several client organisations, as a pool shared by its clients.
Revocation list, optional
An online licence server and a signed revocation list exist. Reading that list is off by default, sends nothing about you, and a revocation takes effect only after a grace period (30 days by default).
When a paid licence ends
No abrupt cut of traffic.
- 48 hours of grace, then 48 hours of read-only.
- Then WAF protection is switched off: traffic keeps flowing, unprotected. Only renewal in the console restores it.
- A request quota that is reached never cuts anything.
How to get one
The offers are ordered online; Enterprise on quote.
- Pro, Agency and Agency Max are ordered online (cart), Free + is ordered for free: the signed key arrives by e-mail. Enterprise goes through a quote. The product itself invoices nobody.
- The Pro, Agency, Agency Max and Enterprise offers, their ceilings and their prices are on the Pricing page, which prevails.
- The legal terms are a draft to be validated by a lawyer.
What is not done, or not proven
We prefer to say it plainly.
- The product does not detect how the free editions are used and never stops anything because of it; support there is community support and there is no warranty.
- “Unlimited requests” describes the volume, not the throughput: performance depends on your infrastructure.
- The antivirus is offered in no plan for now, and the collective defence network is not offered.
Use cases
Start without paying
You install the free version, with no sign-up, and protect up to three sites.
Move to a paid offer
You order an offer online, receive the key by e-mail and paste it: the advanced functions unlock.
Work offline
The key is checked without a network: it suits an isolated installation.
What is included, by edition
The basics are free; the advanced options need a paid offer. An option under licence stays visible in the console, locked, never hidden.
EditionFree Included in every offer, including both free offers (Free and Free +)Pro and above Paid offers: visible in the console, locked without a licence. From Pro, unless Agency or Enterprise is shown
- Licence: a signed key checked on your machine, with no check over the network; at expiry, 48 hours of grace then 48 hours of read-onlyFree
Going back to the default of an advanced option is always possible. What happens when a paid licence ends is described in the pricing FAQ: 48 hours of grace, 48 hours of read-only, then WAF protection is switched off until renewal.
Pricing Read the documentation
Put a shield in front of your applications today
Install it on your own server, or get in touch to talk about licences.