Founder offer: 50% off your first 3 months — in exchange for a short testimonial. Claim it · 14-day free trial at checkout
Enterprise AWS WAF, fully managed

The shield in front of your site. We run it.

AWS WAF on CloudFront, provisioned and tuned for you. Change one DNS record — or hand us nameservers. Count for 24 hours, then block.

$150/site/mo · 5+ sites cheaper · 14-day trial

your-site.comProduct preview
Day 0
Shield up
CloudFront + WAF, SSL issued
Hours 0–24
Count mode
Rules watch, nothing blocked yet
After 24h
Promote
We tell you what's safe to block

Set up & tuned for you

We provision, configure, and tune the WAF. Or request concierge setup and we do the DNS too.

Full managed WAF

Every AWS managed group — SQLi, XSS, exploits, bots, IP reputation, account-fraud protection.

Free auto SSL

A free TLS certificate is issued and renewed for you. Visitors get HTTPS automatically.

Human support

A specialist is one message away — rule tuning, spike reviews, shield health.

Custom rules

Block by country or IP, allow-list trusted clients, rate-limit abuse — next to managed rules.

One screen

Traffic, blocked threats, count→block. No 30-product dashboard to learn.

Protected in three steps

We provision AWS CloudFront + WAF. You point DNS — or we do.

01

Add your site

Domain and origin. We stand up the edge and issue SSL.

02

Point DNS — or we do

Subdomain: one CNAME. Apex: delegate nameservers once. Concierge if you'd rather not touch DNS.

03

Watch, then block

Rules start in count. After 24h we tell you what's safe to promote.

A managed shield, not another platform

Cloudflare hands you a 30-product console and a $250/month bill. We set it up, tune it, and watch it.

ProtectMyWebsiteCloudflare Business
Price$150 / site / month$250 / month
Set up & tuned for you✓ managedSelf-serve
Full AWS managed WAF rules
Custom IP / geo / rate rules
Free auto-renewing SSL
One-click managed-DNS setup
Attack-spike email + Slack/webhook✓ included
Bot Control + count→block tuning✓ includedAdd-on / DIY
Products to learnJust WAF30+
99.9% edge SLA✓ service creditsSee their terms

Cloudflare Business public list for new customers (2026): $250 / month per zone, or $200/mo equivalent on annual prepay ($2,400/year). Need a CDN, Workers, or Zero Trust? That's Cloudflare. If you just need the site protected, you're here. Our 99.9% edge SLA: /sla.

Everything included
$150 / site / mo
or $1,650/yr — 1 month free

Every AWS managed rule group, custom IP/geo/rate rules, account-fraud protection, free SSL, Slack/email spike alerts, live dashboard. 14-day trial. Founder offer: 50% off for 3 months.

Get started

See monthly, annual, and volume pricing

Agencies: volume pricing

White-label the WAF into client retainers. You pay the volume rate; you set the client price.

Sites on the accountPer site / moPer site / yr
1–4 sites$150$1,650
5–9 sites$135 · 10% off$1,485
10–24 sites$120 · 20% off$1,320
25+ sites$105 · 30% off$1,155

Agency retainers & 5-site seat

Who this is for

We're early — no logo wall yet. Built for people who want Cloudflare Business WAF without the 30-product console.

Agencies

Label sites by client, apply one policy across a book of business, and buy seats at volume rates you can mark up.

Agency retainers →

SaaS & SMB

One domain, one CNAME (or we take DNS). Count for 24 hours, then one-click promote. Slack when a spike hits.

Week one

Day 0: shield up. Days 1–2: rules watch. After 24h: we tell you what's quiet enough to block.

Questions, answered

Do I have to move my website?

No. We sit in front of your existing site via DNS — your server, hosting, and code stay exactly where they are.

Will it slow my site down?

No noticeable impact. Traffic runs through CloudFront's global edge, milliseconds from visitors. Clean requests pass straight through to your origin.

What if a rule blocks a real customer?

New protections start in count for 24 hours — they watch without blocking — then you promote to block. You're always in control per rule.

Can I keep my own DNS provider?

Yes. CNAME mode keeps your provider. Or pick managed DNS, delegate nameservers once, and we handle SSL and routing.

Is my traffic data private?

Authorization and cookie headers are redacted before anything is logged. We keep what's needed for blocked attacks and traffic stats.

What if my site gets a lot of traffic?

300 GB and 5 million requests a month included. Extra traffic is $0.15/GB and $3 per million requests. You see live usage; we email before overage adds up.

Can I cancel anytime?

Yes — month to month, $150 per protected site at list (less on 5+). Remove a site and billing follows.

Do you offer agency or multi-site pricing?

Yes. 5–9 sites are $135/site, 10–24 are $120, and 25+ are $105. Label by client and apply one policy across them — retainer math and a 5-site checkout are on the Agencies page.

Can I get Slack or webhook alerts?

Yes. Email is on by default. Add a Slack incoming webhook or any HTTPS webhook on the Alerts page.

Do you have an uptime SLA?

Yes — 99.9% monthly edge availability for Live sites, with service credits if we miss it. Origin downtime, DNS/registrar mistakes, and AWS regional outages are excluded. Details on the SLA.