Proposed starting price; the scope is confirmed in the quote. Basis of assessment: 100 sites, 10 nodes, support during business hours. The quote states the capacities, the functions actually available, the guidance and the response times. 24/7 support and specific commitments are priced separately.
Free quotas are cumulated over all the sites of the installation. Free + replaces Free: the two quotas are not added up.
Performance depends on your infrastructure. “No commercial quota” is not a throughput guarantee.
The ceilings of sites and nodes apply to the whole offer, not to each server. Monthly prices, excluding tax. Paid offers are requested by contact; online payment is not open yet.
Volume rules, simply
What is counted, when you are warned, and why a quota never cuts anything.
Only allowed requests count
The free quota counts the requests let through to your sites. Blocked attacks are left out of the commercial counter.
Warned at 80% then at 100%
The console shows a warning when you reach 80% of the quota, then a second one at 100%.
Lasting overrun: an invitation, not a cut-off
If the quota stays exceeded, we offer you a paid offer, with a grace period announced in advance.
A quota never cuts anything
Protection and traffic are never abruptly interrupted because of a quota. Your site stays protected while you decide.
Compare the offers
The figures are those of the cards above; for Enterprise they depend on the quote.
Free
Free +
Pro
Agency
Enterprise
Protected sites
3
5
15
50
Per quote
WAF nodes
1
1
2
5
Per quote
Allowed requests per month
5 million
15 million
No commercial quota
No commercial quota
No commercial quota
Support
Community
Community
Priority
Priority
Defined in the contract
Advanced functions
✕
✕
✓
✓
✓
Multi-client management (several organisations)
✕
✕
✕
✓
✓
Enterprise sign-in (SSO) and private language model
✕
✕
✕
✕
✓
What the paid offers add
Only functions that exist in the product are listed. A function marked “not yet proven” works in the product's tests but has not yet been tried in real conditions.
Pro and above
Included in Pro, Agency and Enterprise.
Advanced load balancing: algorithms, persistence, active checks, blue/green
Advanced API protection: specification import, limits per key
Advanced IP and geography: degrees by country, simulation, external lists
Advanced definitions: precision measured on your own traffic
Automatic rules built from your traffic
Advanced analytics: funnels, cohorts, map down to the city, alerts, scheduled reports
Supervision of several servers and host security
Off-site backup and backup server
SIEM, ticketing and SOAR integrations, extended audit log
Several certificate authorities, with automatic failover
Agency and above
Included in Agency and Enterprise, on top of Pro.
Several client organisations: quotas, isolation, invitations, reports per client
Standby console (guided, manual takeover; not yet proven)
Enterprise
Added by Enterprise, on top of Agency.
Enterprise sign-in: OIDC, SAML and SCIM (not yet tried with real providers)
Private language model for the assistant (not yet proven)
ToutWAF does not advertise what does not exist: the endpoint antivirus is not offered in any plan for now.
Questions about the offers
What is a protected site, and a WAF node?
A protected site is a domain (with its subdomains) configured in the console. A WAF node is a server that runs the filtering engine. The ceilings apply to the whole offer, not to each server.
What is the difference between Free and Free +?
Free works from the installation, with no account or key: 3 sites and 5 million requests a month. Free + needs a free account (verified e-mail address) and a free activation: 5 sites and 15 million. Free + replaces the limits of Free, they are not added up; the other limits are identical (1 node, 2 users, 1 organisation).
What happens if I exceed my request quota?
Only allowed requests are counted; blocked attacks are not. You are warned at 80% then at 100%. If the overrun lasts, we offer you a paid offer, with a grace period announced in advance. Going over the quota never interrupts protection or traffic.
Can I use Free or Free + for my work?
Yes. Both free offers can be used at work, for a company or for a client's sites, within their limits (sites, nodes, users, requests a month). Pro, Agency and Enterprise raise the limits and add functions and support; they are not required to use ToutWAF professionally. Support on the free offers is community support.
Is “no commercial quota” unlimited?
The paid offers have no commercial request quota. It is not a throughput guarantee: performance depends on your infrastructure.
What happens when a paid offer expires?
At the end of a paid licence: 48 hours of grace (everything works, with warnings), then 48 hours of read-only (traffic and protection continue, nothing can be created or changed), then WAF protection is switched off: traffic keeps flowing, unprotected, and only renewal remains possible in the panel. Renewing restores everything at once. Free and Free + are not concerned: they fall back to their limits.
What is sign-up for, and what happens to my e-mail address?
It creates an account to activate Free + at no cost, and lets us count registered accounts. Receiving news and promotions is an optional box, separate from the activation. A sign-up does not prove that an installation is active.
How do I move to a paid offer?
Write to us from the Contact page: Pro and Agency are activated with a licence key, Enterprise goes through a quote. Online payment is not open yet.
Start free, go paid when you grow
Install ToutWAF without an account, or let's talk about your project if you already need more.