Start free, upgrade for managed challenges and API protection, or run dedicated enterprise edges. Prices in QAR.
WAF rules, bot management, browser challenges, captcha, API Shield and request-rate DDoS controls all run in the edge. Large volumetric L3/L4 attacks require upstream provider filtering, scrubbing or anycast.
Yes. Onboard domains in monitor mode, review the events in the console, then switch to block mode when you're confident.
Both Cloudflare Turnstile and Google reCAPTCHA are supported and configured per domain.
Plans and licensing are modelled in the platform. Connect your payment processor (Stripe, PayPal or a local provider) before charging customers.