Yandex Smart Web Security pricing policy
To calculate the cost of using the service, see the prices in this section.
What goes into the cost of using Smart Web Security
In Smart Web Security, you pay for the actual number of legitimate requests.
Prices for the Russia region
Warning
Prices for Yandex Cloud resources vary from region to region. For more information about the available regions, see Regions.
The currency that can be used to pay for resources depends on which legal entity the user has entered into agreement with. For more information about account registration, see Registering an account in Yandex Cloud.
Billing is based on the number of requests across all clouds linked to a single billing account.
You pay for the actual number of legitimate requests. For each request, you are charged for:
-
Processing with security profile rules, both basic and Smart Protection ones.
-
Processing with WAF rules. If a request is processed with security profile rules and then with WAF rules, you are charged for both.
-
Processing with rules in the dry run mode. Even though a rule blocks a request, those are not blocked in the dry run mode, which means they reach their destination. If you only enabled dry run for one rule type, e.g., for security profile rules, while the request was blocked with WAF or ARL without dry run, you are not charged for such a request.
You are not charged for processing requests with ARL profile rules. You are not charged for blocked requests, regardless of when and which rule blocked them.
Requests processed by security profile rules
| Number of requests per month, million | Cost per million requests, without VAT |
|---|---|
| Up to 0.01 (10,000 requests) inclusive | Free |
| From 0.01 to 1 inclusive | $200.000000 |
| From 1 to 10 inclusive | $28.000000 |
| From 10 to 100 inclusive | $1.600000 |
| From 100 to 1,000 inclusive | $1.120000 |
| From 1,000 to 10,000 inclusive | $0.400000 |
| Over 10,000 | $0.200000 |
Example of calculating the cost of requests processed by WAF rules
Let’s calculate the cost of 315.04 million legitimate requests per month processed by security profile rules:
0.01 × $0 + 0.99 × $200.000000 + 9 × $28.000000 + 90 × $1.600000 + 215.04 × $1.120000 = $834.844800 excluding VAT.
Where:
- 0.01 × $0: Non-billable threshold of 0.01 million requests.
- 0.99 × $200.000000: Cost of the subsequent 0.99 million requests.
- 9 × $28.000000: Cost of the subsequent 9 million requests.
- 90 × $1.600000: Cost of the subsequent 90 million requests.
- 215.04 × $1.120000: Cost of the remaining 215.04 million requests.
Requests processed by WAF rules
Warning
The pricing below will apply starting October 1, 2024.
| Number of requests per month, million | Cost per million requests, without VAT |
|---|---|
| Up to 0.01 (10,000 requests) inclusive | Free |
| From 0.01 to 1 inclusive | $200.000000 |
| From 1 to 10 inclusive | $28.000000 |
| From 10 to 100 inclusive | $1.600000 |
| From 100 to 1,000 inclusive | $1.120000 |
| From 1,000 to 10,000 inclusive | $0.400000 |
| Over 10,000 | $0.200000 |
Example of calculating the cost of requests processed by WAF rules
You can only connect a WAF profile when a security profile is used. Therefore, you pay for processing requests both by WAF and security profile rules.
Let’s calculate the cost of 315.04 million legitimate requests per month processed by security and WAF profile rules:
(0.01 × $0.000000 + 0.99 × $200.000000 + 9 × $28.000000 + 90 × $1.600000 + 215.04 × $1.120000) × 2 = $1669.689600, excluding VAT.
Where:
- 0.01 × $0.000000: Non-billable threshold of 0.01 million requests.
- 0.99 × $200.000000: Cost of the subsequent 0.99 million requests.
- 9 × $28.000000: Cost of the subsequent 9 million requests.
- 90 × $1.600000: Cost of the subsequent 90 million requests.
- 215.04 × $1.120000: Cost of the remaining 215.04 million requests.
- × 2: The total cost is multiplied by
2as each request was first processed by security profile rules and then by WAF profile rules.
Request cost calculations
To use DDoS protection at levels 3 and 4 of the OSI model, enable Yandex DDoS Protection. The service is charged for the public IP address and Yandex DDoS Protection.