Skip to main content
This document explains WAAP plans, billing units, plan management, trials, and professional services. Detailed pricing information is available on the Security pricing page.

​
Plan details

The following table outlines feature availability across WAAP plans. Features marked as Add-on are available as separately purchasable additions to the base plan.

​
Domains / Zones

A Domain / Zone is a WAAP billing and configuration unit. It represents one CDN resource with a single WAAP configuration. Multiple domains and aliases can be grouped into the same Domain / Zone when they:
  • Redirect to the same origin.
  • Share the same CDN configuration.
  • Use the same WAAP security settings.
In this case, all linked domains are managed as one configuration and billed as one Domain / Zone. A single domain can also be split into multiple configurations. For example:
  • portal.domain.com
  • admin.domain.com
  • api.domain.com
If these subdomains are mapped to different CDN resources and require separate WAAP configurations, each one is counted and billed as a separate Domain / Zone.

​
Plan management

WAAP plans are available as either self-serve or sales-assisted offerings.
  • Free, Start, and Pro plans are self-serve and can be activated or changed in the Gcore Customer Portal under WAAP > Billing. Upgrading to a higher self-serve plan takes effect immediately; the price difference is charged on a prorated basis for the remaining days in the current billing period. Downgrading to a lower plan takes effect at the start of the next billing month; no credit is issued for the current period.
  • The Enterprise plan is available through direct engagement with Gcore Sales and supports custom terms and enterprise agreements.
On the Pro plan, Bot Management and Advanced Rules can be enabled as add-ons directly in the Customer Portal. If the plan is later changed to one that does not include these add-ons, Bot Management and Advanced Rules are disabled. Behavioral WAF and CMS Protection are available as add-ons on the Pro and Enterprise plans but require assistance from Gcore Sales to activate.

​
Trial

When a WAAP plan is activated, a trial period applies according to the selected plan.
  • Paid plans include a 30-day trial with full access to the features included in that plan. The trial does not cover separately purchased add-ons; add-ons require individual activation outside the trial.
  • Service usage is limited by the included traffic and plan quotas.
  • The trial ends when 30 days have elapsed or when the included quota is exceeded.
A credit card is not required to start. If no payment method is added, WAAP protection is suspended when the trial ends — either after 30 days or when the included quota is reached. Domains continue to receive incoming traffic, but requests are no longer inspected or filtered by WAAP policies until a payment method is added and service is resumed. If a credit card is added before the trial ends, service continues without interruption. When the trial ends, the regular plan fee begins and any usage beyond the included quota is billed according to the selected plan.

​
Professional services

In addition to self-serve plans, Gcore offers managed security services for organizations that require expert assistance with deployment, policy management, or active threat response. Contact Gcore Sales for pricing and availability of these services.

​
Billing for disabled domains

When a WAAP-protected domain is disabled, the following billing rules apply:
  • Traffic is not processed — no requests are inspected or counted while the domain is disabled.
  • The domain is counted for the current billing month. If a domain is disabled mid-month, it counts as one Domain / Zone for that billing period.
  • The domain is not counted in subsequent months. Starting from the next billing month, a disabled domain no longer appears in usage metrics.
To avoid being billed for a domain in a given month, disable it before that billing month begins.