Plans and pricing

Mikiri WAF Plans

On-premises protection for applications and APIs. Traffic, logs and security decisions stay in your environment.

Business

Complete inline protection for web applications and APIs.

$18,000

per year, including 1 filtering node and 1 machine-learning model for the cluster

  • Signature analysis
  • Machine-learning analysis
  • API firewall
  • Bot protection
  • Virtual patching
  • Client behavior analysis
  • HTTP/3, WebSocket, and gRPC

Additional filtering node $4,500

Additional machine-learning model $1,000

Add-ons are valid until the main license expires.

Request an evaluation

Enterprise

Business, plus compromise detection and investigation.

Price on request

Quoted for the deployment

Everything in Business, plus:

  • Response inspection and blocking
  • Restrict access to a compromised application
  • Vulnerability scanner and attack verification
  • Request and traffic statistics

Contact us

Licensing

What is included in the license

What is a filtering node?

One installed Filter: the inline agent that receives requests, analyzes them and passes allowed traffic to the application. One license key works on one installed Filter, so every node has its own key.

What does a machine-learning model cover?

One behavioral model protects one virtual host and is trained on that host's own traffic. The model belongs to the whole cluster, not to one Filter: every filtering node that serves the host uses the same model, so adding a node does not need another model. Hosts beyond the number of models are still protected by signatures, the API firewall and bot protection, without a behavioral model.

How does virtual patching work without the scanner?

Virtual patching is in both plans. In Business, patches are created automatically by the Mikiri AI module, or manually in WMC and through the API, for example after a security advisory or a finding of the scanner you already use. Enterprise adds the integrated scanner, which finds vulnerabilities and verifies whether recorded attacks against them were real.

Is traffic or request rate limited?

The license sets no limit on traffic volume or request rate. Throughput depends on the hardware of each filtering node and on the traffic profile. Sizing guidance is in the documentation.

How are standby and test nodes licensed?

Every installed Filter uses its own license key. A standby node in an active-passive cluster is an additional filtering node and is priced as one. For an evaluation, a testing key is provided without a fee for 14 calendar days.

Are updates and support included?

Yes. Technical support is included in the license and works on business days, Monday to Friday, 10:00 to 19:00 GMT+4, at support@mikiri.ai. Signature updates reach every Filter automatically while the license is active, and each release is described in the changelog.

How is Enterprise priced?

Enterprise is quoted for each deployment. Send the number of filtering nodes and protected applications to info@mikiri.ai, and we reply with a quote.

Compare

Brief comparison

Business includes virtual patching. Enterprise adds the integrated vulnerability discovery and attack verification workflow.

CapabilityBusinessEnterprise
Signature analysisIncludedIncluded
Machine-learning analysisIncludedIncluded
Bot protectionIncludedIncluded
HTTP/3, WebSocket, gRPCIncludedIncluded
API firewallIncludedIncluded
Virtual patchingIncludedIncluded
Client behavior analysisIncludedIncluded
Vulnerability scanner—Included
Attack verification—Included
Response inspection—Included
Advanced traffic statistics—Included

Full capability list

Request an evaluation

Deploy Mikiri WAF on premises and evaluate it in your own environment. Evaluation is free, and application traffic stays on premises.

Request an evaluation