Google Cloud Armor pricing

This document explains Google Cloud Armor and Google Cloud Armor Managed Protection pricing details. This pricing is active.

	Standard Tier	Plus Tier
Billing model	Pay as you go	Subscription
Subscription price	N/A	$3,000/month (includes up to 100 protected resources)
Protected resources	N/A	$30/protected resource per month after initial 100
WAF requests WAF security policies WAF rules	$0.75 per million requests $5 per policy per month $1 per rule per month	All included
Data processing fee	None	Yes; see the following section.
Time commitment	None	One year
Google Cloud Armor bot management	Billed in accordance with the reCAPTCHA Enterprise pricing model	Billed in accordance with the reCAPTCHA Enterprise pricing model

Protected resources include the following backend types in each enrolled project; the backends are counted as protected resources for all covered endpoint and load balancer types in the enrolled project.

Endpoint type	Protected resource (backend type)
HTTP(S) Load Balancing	Backend service Backend bucket
SSL Proxy Load Balancing	Backend service
TCP Proxy Load Balancing	Backend service
External TCP/UDP Network Load Balancing	Backend service (regional) Target pool Target instance VM with public IP address

Note: Backend buckets will be counted as Google Cloud Armor Managed Protection Plus protected resources after March 15th, 2022.

Data processing fee

The Managed Protection Plus data processing fee meters the data egressed to the internet from all protected resources for every project that is enrolled in Managed Protection Plus. The data processing fee is billed at the billing account level, aggregating usage across all protected resources in all projects enrolled in Managed Protection Plus.

Prices are per GB egressed to the internet directly or through Carrier Peering, and are in addition to other network egress fees. For example, for workloads behind a supported Google Cloud load balancer, the data processing fee meters the bits egressed to the internet through the enrolled load balancer endpoints but does not meter the associated inter-region or inter-zone traffic by the underlying workload. The charge is $0.05 per GB egressed for the first 100 TB and $0.04 per GB for the next 400 TB. If the content being served is using Cloud CDN and is considered cacheable, then the data processing fee for Cloud CDN is applied for that content. The following table contains complete pricing.

TBs egressed	Cloud Load Balancing, internet, and Carrier Peering	Cloud CDN	Cloud DNS
0-100	$0.05	$0.025	Included
101-500	$0.04	$0.020	Included
501-1000	$0.03	$0.015	Included
1001+	Contact account team	$0.010	Included

Note: Edge security policies are billed the same as backend security policies, with the following exception: in Managed Protection Plus tier they incur the data processing fee because of CDN egress.

Note: Rules utilizing reCAPTCHA Enterprise in the match condition or in the action are not treated any differently by Google Cloud Armor; usage billed still depends on your pricing model: Standard or Managed Protection Plus. However reCAPTCHA Enterprise usage is subject to reCAPTCHA Enterprise billing, though it is not billed while the integration is in Preview.

Note: Data processing fee data originating from from backend buckets will be billed after March 15, 2022.

If a backend service has a Google Cloud Armor security policy associated with it, you can use the custom headers feature with that backend service without any additional charge for the custom headers feature.

If you pay in a currency other than USD, the prices listed in your currency on Google Cloud Platform SKUs apply.

What's next

• Read the Google Cloud Armor documentation.
• Try the Pricing calculator.
• Learn about Google Cloud Armor solutions and use cases.

Request a custom quote

With Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.

Contact sales