Stay organized with collectionsSave and categorize content based on your preferences.
Google Cloud Armor pricing
This document explains Google Cloud Armor and Google Cloud Armor Enterprise pricing details. This pricing is
active.
Cloud Armor Standard
Cloud Armor Enterprise
Paygo
Annual
Billing model
Pay as you go
Pay as you go
Subscription
Subscription price
N/A
Prorated $200/month
Includes up to 2 protected resources.
Billed to the project.
$3,000/month
Includes up to 100 protected resources across all projects.
Billed to the billing account with the active subscription.
Protected resources
N/A
Prorated $200/protected resource per month after initial 2, aggregated within your project.
$30/protected resource per month after initial 100, aggregated among all projects in the
subscribed billing account.
Requests (globally scoped security policies)
$0.75 per million requests
All included
All included
Requests (regionally scoped security policies)
$0.60 per million requests
All included
All included
Security policies
$5 per policy per month
All included
All included
Rules
$1 per rule per month
All included
All included
Data processing fee
None
Yes; see the following section
Yes; see the following section
Time commitment
None
None
One year
Cloud Armor bot management
Billed in accordance with the reCAPTCHApricing model
Billed in accordance with the reCAPTCHApricing model
Billed in accordance with the reCAPTCHApricing model
Protected resources include the following backend types in each enrolled project; the backends
are counted as protected resources for all covered endpoint and load balancer types in the
enrolled project. Note that global external Application Load Balancers, regional external Application Load Balancers,
regional internal Application Load Balancers, and global external proxy Network Load Balancers are considered to be protected
resources regardless of whether you have attached a security policy to them.
Endpoint type
Protected resource (backend type)
External Application Load Balancer
Backend service
Backend bucket
External proxy Network Load Balancer
Backend service
External passthrough Network Load Balancer
Backend service (regional)
Target pool
Protocol forwarding
Target instance
Public IP address (VM)
Instance
Data processing fee
The Cloud Armor Enterprise data processing fee meters the data transferred to
the internet from all protected resources for every project that is enrolled
in Cloud Armor Enterprise. When you use Cloud Armor Enterprise Annual, the data
processing fee is billed at the project level, but usage is aggregated across all protected
resources in all projects enrolled in Cloud Armor Enterprise Annual. When you use
Cloud Armor Enterprise Paygo, the data processing fee is billed and usage is aggregated at
the project level.
The Cloud Armor Enterprise data processing fee is separate from the Cloud Load Balancing
data processing fee.
Prices are per GiB transferred to the internet directly or through Carrier Peering, and are in
addition to other data transfer fees. For example, for workloads behind a supported
Google Cloud load balancer, the data processing fee meters the bits data transferred to the internet
through the enrolled load balancer endpoints but does not meter the associated inter-region or
inter-zone traffic by the underlying workload. The charge is $0.05 per GiB data transferred for the
first 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN
and is considered cacheable, then the data processing fee for Cloud CDN is applied for that
content. The following table contains complete pricing.
If a backend service has a Cloud Armor security policy associated with it, you can use
thecustom headers featurewith that
backend service without any additional charge for the custom headers feature.
If you pay in a currency other than USD, the prices listed in your currency onGoogle Cloud Platform SKUsapply.
With Google Cloud's pay-as-you-go pricing, you only pay for the services you
use. Connect with our sales team to get a custom quote for your organization.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],[],[[["\u003cp\u003eGoogle Cloud Armor offers both Standard (pay-as-you-go) and Enterprise (pay-as-you-go or annual subscription) pricing models, each with varying costs for protected resources, requests, security policies, and rules.\u003c/p\u003e\n"],["\u003cp\u003eCloud Armor Enterprise has two models: Paygo, which is prorated at $200/month for up to 2 protected resources, or an annual subscription that is $3,000/month with 100 protected resources included.\u003c/p\u003e\n"],["\u003cp\u003eData processing fees are applicable to both Cloud Armor Enterprise Paygo and Annual models, with costs ranging from $0.02 to $0.075 per GiB transferred depending on the data destination, the data tiers, and the model you are subscribed to.\u003c/p\u003e\n"],["\u003cp\u003eThe number of resources protected depends on the type of load balancer or service that is enabled, such as backend services, backend buckets, target pools, or instances, each of which is counted as one protected resource.\u003c/p\u003e\n"],["\u003cp\u003ereCAPTCHA usage is billed separately under its own pricing model, regardless of whether you're enrolled in the Standard or Cloud Armor Enterprise model.\u003c/p\u003e\n"]]],[],null,["# Pricing\n\nGoogle Cloud Armor pricing\n==========================\n\nThis document explains Google Cloud Armor and Google Cloud Armor Enterprise pricing details. This pricing is\nactive.\n\n| **Note:** If you create a hierarchical security policy in a project that isn't enrolled in Cloud Armor Enterprise, your project is automatically enrolled in Cloud Armor Enterprise Paygo. For more information about hierarchical security policy automatic enrollment behavior, see [hierarchical security policies](/armor/docs/hierarchical-policies-overview#enrollment)\n\nProtected resources include the following backend types in each enrolled project; the backends\nare counted as protected resources for all covered endpoint and load balancer types in the\nenrolled project. Note that global external Application Load Balancers, regional external Application Load Balancers,\nregional internal Application Load Balancers, and global external proxy Network Load Balancers are considered to be protected\nresources regardless of whether you have attached a security policy to them.\n\n| **Note:** When you enable advanced network DDoS protection for a particular region, all public virtual machine instances in the region are counted against your Cloud Armor Enterprise protected resources total.\n\n### Data processing fee\n\nThe Cloud Armor Enterprise data processing fee meters the data transferred to\nthe internet from all protected resources for every project that is enrolled\nin Cloud Armor Enterprise. When you use Cloud Armor Enterprise Annual, the data\nprocessing fee is billed at the project level, but usage is aggregated across all protected\nresources in all projects enrolled in Cloud Armor Enterprise Annual. When you use\nCloud Armor Enterprise Paygo, the data processing fee is billed and usage is aggregated at\nthe project level.\n\nThe Cloud Armor Enterprise data processing fee is separate from the Cloud Load Balancing\ndata processing fee.\n\nPrices are per GiB transferred to the internet directly or through Carrier Peering, and are in\naddition to other data transfer fees. For example, for workloads behind a supported\nGoogle Cloud load balancer, the data processing fee meters the bits data transferred to the internet\nthrough the enrolled load balancer endpoints but does not meter the associated inter-region or\ninter-zone traffic by the underlying workload. The charge is $0.05 per GiB data transferred for the\nfirst 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN\nand is considered cacheable, then the data processing fee for Cloud CDN is applied for that\ncontent. The following table contains complete pricing.\n\n| **Note:** Rules utilizing reCAPTCHA in the match condition or in the action are not treated any differently by Cloud Armor; usage billed still depends on whether you are enrolled with the Standard or Cloud Armor Enterprise pricing model. However, reCAPTCHA usage is subject to reCAPTCHA billing.\n\nIf a backend service has a Cloud Armor security policy associated with it, you can use\nthe [custom headers feature](/load-balancing/docs/custom-headers) with that\nbackend service without any additional charge for the custom headers feature.\n\nIf you pay in a currency other than USD, the prices listed in your currency on\n[Google Cloud Platform SKUs](/skus) apply.\n\nWhat's next\n-----------\n\n- Read the [Google Cloud Armor documentation](/armor/docs).\n- Try the [Pricing calculator](/products/calculator).\n- Learn about [Google Cloud Armor solutions and use cases](/architecture?text=Google Cloud Armor).\n\n#### Request a custom quote\n\nWith Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.\n[Contact sales](/contact?direct=true)"]]
