Cheaper than Cloudflare. One bill, not per domain.

Free

Free

Evaluate Zipper on a real hostname. Edge services with Free quotas — no credit card. Zipper Wire is sold separately.

• 2 hostnames · 3 seats
• The Crown — 2 TB egress / month
• The Keep — OWASP baseline + 5 custom rules
• Portcullis — 50,000 challenges, 3 widgets
• The Moat — application-layer HTTP DDoS (on by default)
• The Herald — DNS-JSON on 2 hostnames
• The Vault — auto TLS on every hostname
• The Lookout — uptime and TLS-certificate probes with incident alerts
• The Scepter — 5 API policies
• The Watchtower — 1-day log retention
• The Chronicle — visitor analytics counted at the edge, no tracker
• The Drawbridge — 1 origin pool
• The Gallery — 5 stored images
• The Archives — encrypted object storage
• The Throne Room — 1 private apps
• The Chancery — roles, policies, and a policy simulator
• The Safe-Conduct — time-boxed elevation passes
• Edge Functions — 10 scripts
• The Stage — 3 git-connected sites
• The Barbican CDN — cache gate with X-Cache-Status on every response
• Job Queues — 5 queues
• Edge AI — 3 grounded models
• Video Delivery — 10 titles
• Origin Connect — 1 connectors
• Emails — HTTP API, 5 mailboxes, 20 routes (no SMTP)
• Visitor Queue — 3 surge rooms
• Palace Guard — 80 stored findings
• The Cellar — 1 sealed Postgres database
• The Armory — 1 sealed apps (20 racks)
• The Mint — ledger-posted Sealed Postgres with AS-OF replay
• The Coffer — edge key-value store and staged feature flags
• The Reliquary — field-sealed documents with blind indexes
• Zipper Pilot — 1 hall, chat + tab callback (voice on Starter+)
• Zipper Forms — 3 forms
• Custom WAF groups
• Customer SMTP submission
• Multi-origin load balancing
• Log push
• SIEM destinations
• SSO / SAML
• SCIM provisioning
• Pinned edge addresses
• Audit export
• Regional data controls
• Community support · 48 hours first response

Business

US$39 /mo

US$390 billed yearly · US$32.50/mo

SSO, SIEM, and multi-origin failover. Versus Cloudflare Business at $200 per domain.

• 40 hostnames · 25 seats
• The Crown — 40 TB egress / month
• The Keep — OWASP baseline + custom rule groups (200 rules)
• Portcullis — 2,000,000 challenges, 80 widgets
• The Moat — application-layer HTTP DDoS (on by default)
• The Herald — DNS-JSON on 40 hostnames
• The Vault — auto TLS on every hostname
• The Lookout — uptime and TLS-certificate probes with incident alerts
• The Scepter — 100 API policies
• The Watchtower — 30-day retention, log push
• The Chronicle — visitor analytics counted at the edge, no tracker
• The Drawbridge — 25 origins, health checks + failover
• The Gallery — 80 stored images
• The Archives — encrypted object storage
• The Throne Room — 25 private apps
• The Chancery — roles, policies, and a policy simulator
• The Safe-Conduct — time-boxed elevation passes
• Edge Functions — 200 scripts
• The Stage — 80 git-connected sites
• The Barbican CDN — cache gate with X-Cache-Status on every response
• Job Queues — 100 queues
• Edge AI — 40 grounded models
• Video Delivery — 200 titles
• Origin Connect — 25 connectors
• Emails — 100 mailboxes, 400 routes, SMTP 5,000/day
• Visitor Queue — 40 surge rooms
• Palace Guard — 5,000 stored findings
• The Cellar — 20 sealed Postgres databases
• The Armory — 20 sealed apps (20 racks)
• The Mint — ledger-posted Sealed Postgres with AS-OF replay
• The Coffer — edge key-value store and staged feature flags
• The Reliquary — field-sealed documents with blind indexes
• Zipper Pilot — 10 halls, live voice booths
• Zipper Forms — 50 forms
• Custom WAF groups
• Customer SMTP submission
• Multi-origin load balancing
• Log push
• SIEM destinations
• SSO / SAML
• SCIM provisioning
• Pinned edge addresses
• Audit export
• Regional data controls
• Priority support · 4 hours first response

Scale

US$79 /mo

US$790 billed yearly · US$65.83/mo

Pinned node addresses, SCIM, and regional data controls — without an enterprise quote.

• 150 hostnames · 100 seats
• The Crown — 150 TB egress / month
• The Keep — OWASP baseline + custom rule groups (Unlimited rules)
• Portcullis — 15,000,000 challenges, 400 widgets
• The Moat — application-layer HTTP DDoS (on by default)
• The Herald — DNS-JSON on 150 hostnames
• The Vault — auto TLS on every hostname
• The Lookout — uptime and TLS-certificate probes with incident alerts
• The Scepter — 500 API policies
• The Watchtower — 90-day retention, log push
• The Chronicle — visitor analytics counted at the edge, no tracker
• The Drawbridge — 100 origins, health checks + failover
• The Gallery — 400 stored images
• The Archives — encrypted object storage
• The Throne Room — 100 private apps
• The Chancery — roles, policies, and a policy simulator
• The Safe-Conduct — time-boxed elevation passes
• Edge Functions — 1,000 scripts
• The Stage — 400 git-connected sites
• The Barbican CDN — cache gate with X-Cache-Status on every response
• Job Queues — 500 queues
• Edge AI — 200 grounded models
• Video Delivery — 1,000 titles
• Origin Connect — 100 connectors
• Emails — 500 mailboxes, 2,000 routes, SMTP 25,000/day
• Visitor Queue — 200 surge rooms
• Palace Guard — 50,000 stored findings
• The Cellar — 80 sealed Postgres databases
• The Armory — 80 sealed apps (20 racks)
• The Mint — ledger-posted Sealed Postgres with AS-OF replay
• The Coffer — edge key-value store and staged feature flags
• The Reliquary — field-sealed documents with blind indexes
• Zipper Pilot — 40 halls, live voice booths
• Zipper Forms — 200 forms
• Custom WAF groups
• Customer SMTP submission
• Multi-origin load balancing
• Log push
• SIEM destinations
• SSO / SAML
• SCIM provisioning
• Pinned edge addresses
• Audit export
• Regional data controls
• Named account manager · 2 hours first response

Enterprise

Custom

Custom capacity, private Portcullis tenants, and a written order form. Billed by invoice.

• Unlimited hostnames · Unlimited seats
• The Crown — Custom TB egress / month
• The Keep — OWASP baseline + custom rule groups (Unlimited rules)
• Portcullis — Unlimited challenges, Unlimited widgets
• The Moat — application-layer HTTP DDoS (on by default)
• The Herald — DNS-JSON on Unlimited hostnames
• The Vault — auto TLS on every hostname
• The Lookout — uptime and TLS-certificate probes with incident alerts
• The Scepter — Unlimited API policies
• The Watchtower — 365-day retention, log push
• The Chronicle — visitor analytics counted at the edge, no tracker
• The Drawbridge — Unlimited origins, health checks + failover
• The Gallery — Unlimited stored images
• The Archives — encrypted object storage
• The Throne Room — Unlimited private apps
• The Chancery — roles, policies, and a policy simulator
• The Safe-Conduct — time-boxed elevation passes
• Edge Functions — Unlimited scripts
• The Stage — Unlimited git-connected sites
• The Barbican CDN — cache gate with X-Cache-Status on every response
• Job Queues — Unlimited queues
• Edge AI — Unlimited grounded models
• Video Delivery — Unlimited titles
• Origin Connect — Unlimited connectors
• Emails — Unlimited mailboxes, Unlimited routes, SMTP Unlimited/day
• Visitor Queue — Unlimited surge rooms
• Palace Guard — Unlimited stored findings
• The Cellar — Unlimited sealed Postgres databases
• The Armory — Unlimited sealed apps (20 racks)
• The Mint — ledger-posted Sealed Postgres with AS-OF replay
• The Coffer — edge key-value store and staged feature flags
• The Reliquary — field-sealed documents with blind indexes
• Zipper Pilot — Unlimited halls, live voice booths
• Zipper Forms — Unlimited forms
• Custom WAF groups
• Customer SMTP submission
• Multi-origin load balancing
• Log push
• SIEM destinations
• SSO / SAML
• SCIM provisioning
• Pinned edge addresses
• Audit export
• Regional data controls
• 24/7 on-call · 15 minutes first response
• Custom egress and PoP placement
• Private Portcullis tenants
• On-prem Keep mirrors
• Custom DPA and subprocessors
• Standing security review
• Penetration-test coordination