Pick by what you need to do at the edge

Starter monitors and detects. Professional mitigates with FlowSpec and RTBH. Enterprise adds traffic engineering, XDP filtering, scrubbing and AI.

Prices in Brazilian reais (BRL). Support and assisted installation are provided in Portuguese only.

Starter

Monitoring and detection

R$999/yr

Annual license only

Up to 10 Gbps throughput 3 users 1 exporter/router Technical support included

NetFlow v5/v9, IPFIX and sFlow
Real-time dashboard
DDoS detection with 50 attack vectors
Alerts via email, Telegram and webhook
Flow browser with filters
Top talkers and protocols
Statistics and 95th percentile
SNMP interface monitoring
IP zones and templates
PDF reports

Request Starter

Professional

Detection, mitigation and BGP

R$250/mo

or R$1,500/year on the promotional annual plan (about R$125/month)

Up to 40 Gbps throughput 10 users Up to 2 exporters/routers Priority support

Everything in Starter, plus:

BGP FlowSpec mitigation
RTBH (blackhole)
Flow Explorer (Sankey)
CDN monitoring (40+ providers)
Looking Glass + RPKI
AS and peering analysis
IP investigation
Custom dashboards

Request Professional

Enterprise

The full platform

R$500/mo

or R$2,500/year on the promotional annual plan (about R$208.33/month)

Up to 100 Gbps throughput* Unlimited users Up to 10 exporters/routers Dedicated 24/7 support

Everything in Professional, plus:

Traffic Engineering
Capacity Planning
Cost Optimization
SLA & automatic failover
Inbound Optimization
Route Quality probing
Routing Policies
Packet filtering (nftables)
BMP Station
eBPF/XDP packet filtering
XDP SYN-flood protection New
Mitigation redirect (scrubbing)
Syslog/SIEM export
AI Decision Engine and Attack Analyst New

Talk to sales

On every plan: Managed Objects (customers and contracts with their own SLA and policy), a portal for your customers with a login or read-only link, and the REST API v1 documented in OpenAPI.

Every plan includes free updates and assisted installation (in Portuguese).

Updating takes one command: the updater verifies package integrity, keeps your settings and leaves historical data untouched.

* Throughput refers to the total volume of traffic analyzed. Contact us for higher volumes.
The Starter plan has no monthly license: it is sold on an annual basis only (R$999.00/year).
Professional: R$250.00/month, or R$1,500.00/year on promotional terms (equivalent to R$125.00/month). Enterprise: R$500.00/month, or R$2,500.00/year on promotional terms (equivalent to R$208.33/month).
Flows from routers above the plan's quota are dropped at ingestion.

Already a customer? Manage your license, subscription and invoices in the Customer area.

demo license

Try it before you buy

On your own server, with your own network's traffic: you see detection, mitigation and AI at work before you choose a plan.

Request a demo license

Tell us about your edge in the demo request. Once we've been in touch, the key is waiting in the Customer area: 7 days with every Enterprise feature, on 1 server.
Install on a Debian 13 server

About 40 minutes following the installation guide, with support assisting the install (in Portuguese). Point one router's flows at it and traffic shows up within 1 to 2 minutes.
Subscribe to a plan

Pick Starter, Professional or Enterprise. The permanent license is activated on the same server, with nothing to reinstall.

Request a demo license Read the installation guide

EdgeWarden license active

EW-DEMO-••••-••••-7F3A

Plan: Enterprise demo
Servers: 1
Valid for: 7 days
Check-in: every 24 h

Time remaining5 of 7 days

Unlocked features

FlowSpec
RTBH
eBPF/XDP
Scrubbing
Traffic Engineering
BMP Station
Route Quality
AI Decision Engine

Illustration of the Customer area

comparison

What each plan includes

Feature by feature. Each plan includes everything in the one before it; what changes is what the license unlocks and how much traffic, how many routers and how many users it covers.

Feature comparison between the Starter, Professional and Enterprise plans
Feature	Starter	Professional	Enterprise
Limits and support
Throughput analyzed	Up to 10 Gbps	Up to 40 Gbps	Up to 100 Gbps*
Users	3	10	Unlimited
Exporters/routers	1	Up to 2	Up to 10
Support (in Portuguese)	Technical, included	Priority	Dedicated 24/7
Billing	Annual	Monthly or annual	Monthly or annual
Collection & Monitoring
NetFlow v5/v9, IPFIX, sFlow	Included	Included	Included
Real-time dashboard	Included	Included	Included
SNMP interface monitoring	Included	Included	Included
Flow browser with filters	Included	Included	Included
95th percentile	Included	Included	Included
Top talkers and protocols	Included	Included	Included
Alerts via email, Telegram and webhook	Included	Included	Included
IP zones and templates	Included	Included	Included
PDF reports	Included	Included	Included
Platform and integration · on every plan
Managed Objects: customers and contracts with their own SLA and policy	Included	Included	Included
Portal for your customers (login or read-only link)	Included	Included	Included
REST API v1 documented in OpenAPI	Included	Included	Included
Security & DDoS
DDoS detection (50 attack vectors)	Included	Included	Included
BGP FlowSpec mitigation	Not included	Included	Included
RTBH (blackhole)	Not included	Included	Included
Packet filtering (nftables)	Not included	Not included	Included
eBPF/XDP packet filtering	Not included	Not included	Included
XDP SYN-flood protection by retransmission New	Not included	Not included	Included
Mitigation redirect (scrubbing)	Not included	Not included	Included
Syslog/SIEM export	Not included	Not included	Included
Advanced Analytics
Flow Explorer (Sankey)	Not included	Included	Included
CDN monitoring (40+ providers)	Not included	Included	Included
Looking Glass + RPKI	Not included	Included	Included
AS and peering analysis	Not included	Included	Included
IP investigation	Not included	Included	Included
Custom dashboards	Not included	Included	Included
BMP Station	Not included	Not included	Included
Optimization & Planning
Traffic Engineering	Not included	Not included	Included
Capacity Planning	Not included	Not included	Included
Cost Optimization	Not included	Not included	Included
SLA & automatic failover	Not included	Not included	Included
Route Quality probing	Not included	Not included	Included
Inbound Optimization	Not included	Not included	Included
Routing Policies	Not included	Not included	Included
AI
AI Decision Engine and Attack Analyst New	Not included	Not included	Included

* Throughput refers to the total volume of traffic analyzed. Contact us for higher volumes.

Do I need BGP to get started?

No. Collection, the dashboard and detection all work without BGP. You only need a BGP session with your routers to mitigate via FlowSpec, RTBH or traffic diversion.

Which routers are supported?

Any router that exports NetFlow v5/v9, IPFIX or sFlow and supports BGP FlowSpec or RTBH. Juniper, Huawei and MikroTik have dedicated integrations (PBR, templates and counters); Cisco is supported through SSH terminal access.

Does my network data leave my server?

No. EdgeWarden runs on your own server. AI is optional and can run on a local LLM (Ollama, vLLM, LM Studio); even with external providers, the model only receives aggregated numbers, never raw flow data. The license checks in every 24 h and tolerates 30 days without contact.

Can I change plans later?

Yes. The software is the same on every plan: a new license unlocks the features with no reinstall. Renewals and plan changes are arranged with our sales team.

Is there a demo license?

Yes: 7 days with every Enterprise feature, on one server. Getting from request to subscription takes three steps, laid out in Try it before you buy.

How fast is an attack mitigated?

The engine runs analysis cycles every 10 seconds (configurable down to 1 s) and announces mitigation within the cycle. With NetFlow and IPFIX, add the router's export timeout (typically 15 to 60 s); with sFlow or the Packet Sensor, detection can take under 1 second.

Is IPv6 supported?

Yes: collection, zones, detection, /128 RTBH, IPv6 FlowSpec, IPv6 diversion and per-prefix IPv6 carpet-bombing detection.

How do updates work?

They're included in every plan at no extra cost. Updating takes one command: the updater verifies package integrity, keeps your license and settings, runs a system health check and leaves historical data untouched. Downtime stays under 1 minute. The step-by-step is in the installation guide.

Can I resell DDoS protection to my customers?

Yes. Managed Objects are included in every plan: each customer gets their own zone, SLA, mitigation policy, notifications and portal, with a login or a read-only link. To mitigate your customers' attacks, not just detect them, you need Professional (FlowSpec and RTBH) or Enterprise, which adds XDP filtering and scrubbing. Our sales team can help you size the plan by number of routers and traffic volume.

What if I need more than 100 Gbps?

Contact sales for higher volumes and for deployments with a dedicated scrubbing center.

Protect your network now

See EdgeWarden in action with data from your own network.

Request a demo Chat on WhatsApp

Plans and pricing

Pick by what you need to do at the edge

Starter

Professional

Enterprise

Try it before you buy

Request a demo license

Install on a Debian 13 server

Subscribe to a plan

What each plan includes

Frequently asked questions

Protect your network now