# WAF vs WAF Pro

> Compare PingLess WAF ($19/month) and WAF Pro ($49/month): origins, rate shaping, schema protection, custom rules, SLA, and which to pick.
>
> Canonical: https://xdp.network/docs/pingless-waf/waf-vs-waf-pro · Updated 2026-08-09

Both PingLess WAF tiers put the same managed edge in front of your site. The
base plan covers a single origin with the full managed ruleset; WAF Pro removes
the limits and adds controls aimed at production storefronts and APIs.

## WAF vs WAF Pro at a glance

| | PingLess WAF | PingLess WAF Pro |
| --- | --- | --- |
| Price | $19/month | $49/month |
| Origins | One, wildcard subdomains included | Unlimited |
| Managed ruleset (floods, bots, virtual patching) | Included | Included |
| Per-route rate shaping | — | Included |
| API schema protection | — | Included |
| Custom rulesets | — | Included |
| Mitigation SLA | — | 99.99% uptime, on-call response |

Everything the base plan does, WAF Pro does too — the differences are scale and
control.

## Which should you pick

### Pick WAF for a personal or small site

If you run a personal site, blog, or small business page on a single origin, the
base plan is enough. You get the full managed ruleset — flood absorption, bot
filtering, and virtual patching — for $19 a month.

### Pick WAF Pro for a production storefront or API

If revenue depends on your site staying up, or you run an API, pick Pro. You get
unlimited origins, per-route rate shaping for fine-grained throttles, schema
protection that rejects malformed payloads early, custom rulesets for your own
signatures, and the mitigation SLA: 99.99% uptime with an on-call response when
something big hits.

## Billing and cancellation

Both plans are billed monthly, and you can cancel at any time by opening a
ticket. See [Managing products](/docs/account-billing/managing-products) for
plan changes.

## Next steps

- [Setup](/docs/pingless-waf/setup)
- [Rules and protections](/docs/pingless-waf/rules)
- [What is XDP.NETWORK](/docs/getting-started/what-is-xdp-network)