Simple, transparent pricing

Yes. The free plan includes one server in monitor mode — it detects attacks but does not block them. You get threat intelligence, brute force detection, and dashboard access with 2,000 events/month. No credit card required, no time limit.

Your first server stays fully protected. To add more servers, upgrade to Pro. You can do this anytime from your dashboard.

Pro is billed per server per month. You only pay for active servers. If you remove a server, billing adjusts automatically on the next cycle. Annual billing saves you 20%.

The WAF analyzes your web server access logs in real time and detects SQL injection, XSS, remote code execution, path traversal, config probes, scanner activity, and 12+ more OWASP attack types. It works with nginx and Apache out of the box — zero configuration needed, the agent auto-detects your log paths and bans attackers instantly.

EPSS (Exploit Prediction Scoring System) estimates the probability that a CVE will be exploited in the wild. Defensia combines EPSS with CVSS severity and active exploitation flags to compute a priority score for every vulnerability on your servers, so you know exactly which CVEs to patch first.

Ubuntu 18.04+, Debian 10+, CentOS 7+, Rocky Linux 8+, AlmaLinux 8+, RHEL 8+, Fedora 36+, and Amazon Linux 2. Supports systemd, Upstart, and SysVinit. The agent auto-detects your distro and init system during install.

Yes, cancel from your dashboard with one click. Your servers keep the current protection until the end of the billing period. No cancellation fees.

Yes. We offer a 14-day Pro trial with full access to all features and up to 3 servers. Sign up and your account is automatically upgraded to Pro for 14 days. No credit card needed.

Same as bare metal — each node is one server slot. Free plan includes 1 node with 1 domain protected by WAF. Pro plan includes up to 10 domains per node. Deploy via Helm and each DaemonSet pod registers as one server.