The editions at a glance
| Edition | Includes | Price |
|---|---|---|
| Windows Standard | the WAF, Windows host security, threat-intelligence feeds, geo blocking, upload file inspection | $49 per server per month, or $490 per server per year |
| Windows Premium | everything in Windows Standard, Premium Threat Intelligence, herd immunity, bot detection and protection, the Smart Tuning Advisor | $99 per server per month, or $990 per server per year |
| Windows Enterprise | everything in Windows Premium, API protection: API specification checks, JWT validation, CORS controls and GraphQL limits | from $199 per server per month, or from $1,990 per server per year |
| Linux appliance Premium | the WAF, bot detection and protection, Premium Threat Intelligence, herd immunity, geo blocking, multi-tenant gateway, threat-intelligence feeds, upload file inspection, the Smart Tuning Advisor | from $499 per month for 2 cores, or from $4,990 per year |
| Linux appliance Enterprise | everything in Linux appliance Premium, API protection: API specification checks, JWT validation, CORS controls and GraphQL limits | quoted by sales |
Every edition also includes per-site allowed methods and route limits (API Protection), login brute-force protection, per-visitor rate limit (on by default), overload protection. Prices are in USD, per month or per year, excluding applicable taxes. The full feature-by-feature table is on portwall.net/compare.html.
Which Windows edition to pick
- Windows Standard suits a server whose sites need solid WAF protection, the server's own host security, threat feeds, geo-blocking and upload scanning. It is a complete WAF: nothing about blocking attacks is held back.
- Windows Premium suits a server that gets automated abuse (scrapers, credential stuffing, floods of ordinary-looking requests) or many attackers that come back. It adds bot protection, Premium Threat Intelligence, herd immunity, and the Smart Tuning Advisor, which suggests the exclusions that fix false positives.
- Windows Enterprise suits sites that publish APIs. It adds checks against the API's specification (OpenAPI), sign-in token (JWT) validation, cross-origin (CORS) controls and GraphQL limits.
Which appliance edition to pick
The appliance starts at Premium, so bot protection, Premium Threat Intelligence, herd immunity and the Smart Tuning Advisor are in every appliance licence. Choose Enterprise when the sites behind it publish APIs that need specification checks, JWT validation, CORS controls or GraphQL limits. The appliance is also priced by CPU cores: see Prices.
What happens to a feature your edition does not include
It stays visible in the console, says which edition adds it, and keeps whatever you set. The moment your licence includes it, it takes effect, with nothing to set up again. Nothing breaks when you move between editions.
Changing edition later
You can move up at any time, and down from your next renewal. Your configuration is kept: a higher edition switches on its extra features with the settings you already made, and a lower one withholds them without deleting anything. To change edition, write to [email protected] or open a ticket in the customer portal. An upgrade to a higher edition or a larger core licence during a billing period costs the difference between the old and the new price, prorated for the time left in that period; the new price applies from the next renewal. A move to a lower edition or a smaller core licence takes effect at the next renewal: the current plan stays until then, with no refund or credit for the rest of the period.
Herd immunity on Standard
Every edition contributes to herd immunity: it reports the public addresses that attacked it, which helps protect every PortWall server. Receiving the resulting block list, and Premium Threat Intelligence, are Premium and above. See Data PortWall sends, and what stays with you.