Bunny Shield offers three pricing tiers to accommodate different levels of protection and flexibility based on your needs. Choose between the Basic for base protection, the Advanced for enhanced security features and customization, and Enterprise for unparalleled security, performance, and flexibility.

Plans overview

Basic

Cost: $0/month
The Free Plan is perfect for getting started with Bunny Shield and provides essential protection for small projects and websites. However, it has certain limitations that make it suitable primarily for low-traffic or less complex use cases.

Features

WAF (Web Application Firewall): Preconfigured rules only (no custom WAF rules).
Rate limiting: Up to 2 Rate Limits can be configured.
Challenge response: Not available. You can't Challenge responses via Rate limit rules
Rate limit timeframe: Maximum of 10 seconds for rate limit windows.
DDoS mitigation: Stateful Mitigation & JS Challenge (Extreme) Included.

This plan provides essential protection but is limited in customization options and advanced features.

Free plan limitations

Custom WAF rules: Not available. You can only use the Managed rules provided by Bunny Shield.
Rate limiting: Limited to 2 custom rate limits, with a maximum timeframe of 10 seconds.
Challenge response: You cannot issue a JS challenge for bad requests.
Advanced features: Limited access to some advanced security features like comprehensive bot detection and fine-tuned DDoS mitigation.

Advanced

Cost: $9.50/month
The Premium Plan unlocks full access to Bunny Shield’s features, providing more control, customization, and protection for high-traffic websites or mission-critical applications.

Features

WAF (Web Application Firewall): Up to 10 Custom WAF Rules for blocking or allowing traffic based on custom criteria.
Rate limiting: Configure up to 10 Rate Limits to control traffic based on IP, URL, or user-specific limits.
Challenge response: Available. You can challenge suspicious requests with PoW JS Challenge.
Rate limit timeframe: Increased timeframe of up to 1 day for rate limits, providing more flexibility in how you control traffic.
DDoS mitigation: Enhanced protection with greater flexibility in configuring mitigation rules.
Bot detection (coming soon): Advanced bot detection to help block malicious or unwanted bot traffic more effectively.

Advanced plan benefits

Custom WAF rules: Define up to 10 custom rules to tailor the WAF protection to your specific application needs.
Rate limiting: Create up to 10 rate limit rules with more extended time windows of up to 24 hours, allowing for better control over how requests are handled.
Challenge response: Block or challenge suspicious requests to reduce the impact of bad actors on your site.
Full feature access: Get full access to all Bunny Shield features, including advanced DDoS mitigation and bot detection.

Enterprise

Cost: Contact us for pricing.

Our Enterprise plan is purpose-built for organizations that operate large-scale or mission-critical applications and demand unparalleled security, performance, and flexibility. Whether you’re protecting a high-traffic e-commerce platform, a financial system that processes sensitive transactions, or a global service handling millions of requests per day, the Enterprise plan is designed to deliver robust and customizable protection that can adapt to today’s evolving threat landscape.

This offering goes beyond standard security measures by providing a Dedicated Security Engineer who will work alongside your team to ensure a smooth deployment, optimize configurations based on your specific environment, and remain on-call when new threats emerge. You will also benefit from bespoke SLAs that prioritize Time to Mitigation, Uptime, and Custom DDoS Rules, guaranteeing quick responses and minimal downtime. Our advanced technologies, ranging from AI-powered WAF and bot detection to comprehensive DDoS mitigation, are geared toward proactively identifying and neutralizing threats, so you can focus on scaling your business without compromise.

Features

WAF (Web Application Firewall): Up to 255 built-in rules, with unlimited Custom WAF Rules and an AI-powered learning mode (Shield AI) for proactive threat detection.
Rate limiting: Configure unlimited Rate Limits for precise traffic control, ensuring you can handle complex scenarios or sudden surges.
DDoS mitigation: Advanced Managed DDoS Rules and Zero-Day Threat Protection are included, offering a high level of defense against evolving attacks.
Bot detection (coming soon): Complex bot mitigation with AI-driven analysis to effectively identify and block malicious or unwanted bot traffic.

Enterprise plan benefits

Dedicated Security Engineer: Gain a specialized security resource who provides a week of hands-on onboarding assistance, configures tailored defenses, and offers on-call expertise whenever threats arise.
Comprehensive WAF coverage: Leverage extensive out-of-the-box protection, unlimited custom rules, and Shield AI capabilities for proactive mitigation of both known and zero-day threats.
Flexible and unlimited rate limiting: Manage traffic in real time and address unique surges or patterns with highly customizable rate-limit configurations.
Advanced DDoS and Zero-Day Protection: Secure your platform with specialized rulesets and tools that detect and counter rapidly evolving attack vectors, including personalized DDoS rules.
Complex bot detection and mitigation: Benefit from AI-driven analysis to distinguish legitimate automation from malicious traffic, maintaining seamless user experiences.
Bespoke SLAs: Enjoy tailored service-level agreements that focus on Time to Mitigation, Uptime, and Custom DDoS Rules, ensuring swift responses and maximum operational reliability.
White-labeled, customizable experience: Preserve brand consistency by customizing security pages and messages, even when users are challenged or blocked.
Prioritized support: Rely on top-tier technical expertise, faster response times, and comprehensive SLAs to align with the demands of high-stakes business environments.

Feature comparison table

The table below provides a side-by-side comparison of key features and capabilities available in the Basic, Advanced, and Enterprise plans, enabling quick evaluation and plan selection.

Choosing the right plan

The Basic is ideal for developers and small projects that need basic protection and don’t require advanced customization or features.

The Advanced is perfect for larger websites, businesses, and mission-critical applications that need a more flexible and robust security solution.

Getting started

To begin using Bunny Shield, sign up for the Basic, or upgrade to the Advanced directly from your dashboard for just $9.50/month.

Need help or encountering issues?

If you encounter any difficulties or have questions, our support team is here to assist you. Please don't hesitate to contact us via support request form for prompt assistance.

Our dedicated support team is ready to help you resolve any issues you might face during the deployment process, provide additional guidance, or answer your questions.