The invoice is only one part of DDoS TCO. A realistic comparison includes software, hardware, transit, cloud transfer, support, operations, redundancy and the cost of maintaining enough capacity to survive an attack.
You pay for access to distributed mitigation networks, capacity, security operations and clean traffic delivery.
Protection is part of the cloud ecosystem. AWS Shield Standard is included for supported resources; Shield Advanced has a separate subscription and usage model.
You provide servers and upstream capacity; the product provides local mitigation and policy enforcement.
Community is free for evaluation. DDoS protection is included in Business and Enterprise and is an add-on for Gateway. NeuroWall does not add a per-GB, per-packet or per-attack software charge.
| Deployment | Monthly | Annual | 3 Years |
|---|---|---|---|
| 10 Business nodes | $990 | $11,880 | $35,640 |
| 25 Business nodes | $2,475 | $29,700 | $89,100 |
| 100 Business nodes | $9,900 | $118,800 | $356,400 |
| 10 Enterprise nodes | $2,990 | $35,880 | $107,640 |
Software subscription only. Infrastructure, transit, staff, optional add-ons and volume discounts are separate.
AWS publicly lists Shield Advanced at $3,000 per organization per month, plus applicable data-transfer usage charges, with a one-year commitment.
Cloudflare Magic Transit, for example, measures clean bandwidth and excludes blocked DDoS traffic from that measurement. Akamai, Radware and Imperva generally require commercial quotes for comparable enterprise deployments.
Inline protection can only filter traffic that reaches it. If the upstream link is saturated first, you need upstream mitigation or more network capacity. That capacity belongs in the TCO model.
Annual subscription and committed contract value.
Appliances, servers, VMs, NICs and redundancy.
Transit, clean delivery, cross-connects and cloud transfer.
Who handles the attack at 3 a.m.?
How large an attack can the environment survive?
Refreshes, upgrades, support and professional services.
NeuroWall's per-node software price is predictable, but local protection does not remove transit, compute or upstream-capacity costs.