Free to start, paid when you grow

Two free offers and three paid offers. Free quotas count allowed requests only, and going over one never cuts anything.

Free

Free

No sign-up

Free
  • 3 protected sites
  • 1 WAF node
  • 5 million requests per month
  • Works from the installation, no account and no licence key
  • 2 users, 1 organisation
  • Community support
  • Professional use allowed

Free, including for professional use, within the limits. Free edition terms

Install for free
Free

Free +

With sign-up

Free
  • 5 protected sites
  • 1 WAF node
  • 15 million requests per month
  • Free activation after sign-up and e-mail check
  • Replaces the limits of Free: quotas are not added up
  • 2 users, 1 organisation
  • Community support
  • Professional use allowed

Free, including for professional use, within the limits. Free edition terms

Create my account

Pro

To grow

€49 excl. tax / month
  • 15 protected sites
  • 2 WAF nodes
  • No commercial quota
  • Advanced functions (list below)
  • Priority support
Upgrade to Pro

Agency

For agencies

€149 excl. tax / month
  • 50 protected sites
  • 5 WAF nodes
  • No commercial quota
  • Everything in Pro
  • Multi-client management
  • Priority support
Choose Agency

Enterprise

For large deployments

From €499 excl. tax / month, on quote
  • Protected sites: per quote
  • WAF nodes: per quote
  • No commercial quota
  • Everything in Agency
  • Personalised guidance
  • Support defined in the contract

Proposed starting price; the scope is confirmed in the quote. Basis of assessment: 100 sites, 10 nodes, support during business hours. The quote states the capacities, the functions actually available, the guidance and the response times. 24/7 support and specific commitments are priced separately.

Let's talk about your project
Included in every offer
  • WAF protection
  • Two-factor authentication
  • Security updates

Free quotas are cumulated over all the sites of the installation. Free + replaces Free: the two quotas are not added up.

Performance depends on your infrastructure. “No commercial quota” is not a throughput guarantee.

The ceilings of sites and nodes apply to the whole offer, not to each server. Monthly prices, excluding tax. Paid offers are requested by contact; online payment is not open yet.

Volume rules, simply

What is counted, when you are warned, and why a quota never cuts anything.

Only allowed requests count

The free quota counts the requests let through to your sites. Blocked attacks are left out of the commercial counter.

Warned at 80% then at 100%

The console shows a warning when you reach 80% of the quota, then a second one at 100%.

Lasting overrun: an invitation, not a cut-off

If the quota stays exceeded, we offer you a paid offer, with a grace period announced in advance.

A quota never cuts anything

Protection and traffic are never abruptly interrupted because of a quota. Your site stays protected while you decide.

Compare the offers

The figures are those of the cards above; for Enterprise they depend on the quote.

FreeFree +ProAgencyEnterprise
Protected sites351550Per quote
WAF nodes1125Per quote
Allowed requests per month5 million15 millionNo commercial quotaNo commercial quotaNo commercial quota
SupportCommunityCommunityPriorityPriorityDefined in the contract
Advanced functions✕✕✓✓✓
Multi-client management (several organisations)✕✕✕✓✓
Enterprise sign-in (SSO) and private language model✕✕✕✕✓

What the paid offers add

Only functions that exist in the product are listed. A function marked “not yet proven” works in the product's tests but has not yet been tried in real conditions.

Pro and above

Included in Pro, Agency and Enterprise.

  • Advanced load balancing: algorithms, persistence, active checks, blue/green
  • Advanced API protection: specification import, limits per key
  • Advanced IP and geography: degrees by country, simulation, external lists
  • Advanced definitions: precision measured on your own traffic
  • Automatic rules built from your traffic
  • Advanced analytics: funnels, cohorts, map down to the city, alerts, scheduled reports
  • Supervision of several servers and host security
  • Off-site backup and backup server
  • SIEM, ticketing and SOAR integrations, extended audit log
  • Several certificate authorities, with automatic failover

Agency and above

Included in Agency and Enterprise, on top of Pro.

  • Several client organisations: quotas, isolation, invitations, reports per client
  • Standby console (guided, manual takeover; not yet proven)

Enterprise

Added by Enterprise, on top of Agency.

  • Enterprise sign-in: OIDC, SAML and SCIM (not yet tried with real providers)
  • Private language model for the assistant (not yet proven)

ToutWAF does not advertise what does not exist: the endpoint antivirus is not offered in any plan for now.

Questions about the offers

What is a protected site, and a WAF node?

A protected site is a domain (with its subdomains) configured in the console. A WAF node is a server that runs the filtering engine. The ceilings apply to the whole offer, not to each server.

What is the difference between Free and Free +?

Free works from the installation, with no account or key: 3 sites and 5 million requests a month. Free + needs a free account (verified e-mail address) and a free activation: 5 sites and 15 million. Free + replaces the limits of Free, they are not added up; the other limits are identical (1 node, 2 users, 1 organisation).

What happens if I exceed my request quota?

Only allowed requests are counted; blocked attacks are not. You are warned at 80% then at 100%. If the overrun lasts, we offer you a paid offer, with a grace period announced in advance. Going over the quota never interrupts protection or traffic.

Can I use Free or Free + for my work?

Yes. Both free offers can be used at work, for a company or for a client's sites, within their limits (sites, nodes, users, requests a month). Pro, Agency and Enterprise raise the limits and add functions and support; they are not required to use ToutWAF professionally. Support on the free offers is community support.

Is “no commercial quota” unlimited?

The paid offers have no commercial request quota. It is not a throughput guarantee: performance depends on your infrastructure.

What happens when a paid offer expires?

At the end of a paid licence: 48 hours of grace (everything works, with warnings), then 48 hours of read-only (traffic and protection continue, nothing can be created or changed), then WAF protection is switched off: traffic keeps flowing, unprotected, and only renewal remains possible in the panel. Renewing restores everything at once. Free and Free + are not concerned: they fall back to their limits.

What is sign-up for, and what happens to my e-mail address?

It creates an account to activate Free + at no cost, and lets us count registered accounts. Receiving news and promotions is an optional box, separate from the activation. A sign-up does not prove that an installation is active.

How do I move to a paid offer?

Write to us from the Contact page: Pro and Agency are activated with a licence key, Enterprise goes through a quote. Online payment is not open yet.

Start free, go paid when you grow

Install ToutWAF without an account, or let's talk about your project if you already need more.