Google Cloud Armor pricing

This document explains Google Cloud Armor and Google Cloud Armor Managed Protection pricing details. This pricing is active.

Google Cloud Armor Standard Managed Protection Plus
Billing model Pay as you go Subscription
Subscription price N/A $3,000/month (includes up to 100 protected resources)
Protected resources N/A $30/protected resource per month after initial 100
Requests (globally-scoped security policies) $0.75 per million requests All included
Requests (regionally-scoped security policies) $0.60 per million requests All included
Security policies $5 per policy per month All included
Rules $1 per rule per month All included
Data processing fee None Yes; see the following section.
Time commitment None One year
Google Cloud Armor bot management Billed in accordance with the reCAPTCHA Enterprise pricing model Billed in accordance with the reCAPTCHA Enterprise pricing model

Protected resources include the following backend types in each enrolled project; the backends are counted as protected resources for all covered endpoint and load balancer types in the enrolled project.

Endpoint type Protected resource (backend type)
External Application Load Balancer
  • Backend service
  • Backend bucket
External proxy Network Load Balancer Backend service
External passthrough Network Load Balancer
  • Backend service (regional)
  • Target pool
Protocol forwarding Target instance
Public IP address (VM) Instance

Data processing fee

The Managed Protection Plus data processing fee meters the data egressed to the internet from all protected resources for every project that is enrolled in Managed Protection Plus. The data processing fee is billed at the billing account level, aggregating usage across all protected resources in all projects enrolled in Managed Protection Plus. The Managed Protection Plus data processing fee is separate from the Cloud Load Balancing data processing fee.

Prices are per GiB egressed to the internet directly or through Carrier Peering, and are in addition to other network egress fees. For example, for workloads behind a supported Google Cloud load balancer, the data processing fee meters the bits egressed to the internet through the enrolled load balancer endpoints but does not meter the associated inter-region or inter-zone traffic by the underlying workload. The charge is $0.05 per GiB egressed for the first 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN and is considered cacheable, then the data processing fee for Cloud CDN is applied for that content. The following table contains complete pricing.

TiB egressed Cloud Load Balancing Cloud CDN & Media CDN Network load balancer/Instance Cloud DNS
0-100 $0.05 $0.025 $0.05 Included
101-500 $0.04 $0.020 $0.04 Included
501-1000 $0.03 $0.015 $0.03 Included
1001+ Contact account team $0.010 Contact account team Included

If a backend service has a Google Cloud Armor security policy associated with it, you can use the custom headers feature with that backend service without any additional charge for the custom headers feature.

If you pay in a currency other than USD, the prices listed in your currency on Google Cloud Platform SKUs apply.

What's next

Request a custom quote

With Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.
Contact sales