Back
You pay for your human traffic.
Never for the bots.
Bots are stopped at the perimeter. They never reach your site.
From €158 a month for everything ADPAL does.
Blocked bots are never billed
No “contact us” wall
2.5M+ websites protected
Configure your plan
Pick a plan, then tune it below, the price updates as you go
Plans that scale with your traffic
Connect all your sites under one account and pay one simple monthly fee based on your traffic
Core
Up to 0.75 TB / month
€158 /mo
per month, billed yearly
€1,896 a year
Most SMB sites
Growth
0.75 – 1.5 TB / month
€170 /mo
per month, billed yearly
€2,040 a year
Scale
1.5 – 3 TB / month
€181 /mo
per month, billed yearly
€2,172 a year
Custom
Over 3 TB / month
Let's talk
Traffic over 3 TB a month?
We quote in one working day
How many websites are you protecting?
Every site you connect to ADPAL counts as one. They all sit on one account and one invoice
How do you want to pay?
Same protection either way. Paying for the year up front brings the monthly cost down
.Snippet definition
Bot protection pricing, in one paragraph
ADPAL bot protection starts at €158 a month, billed yearly at €1,900, for sites serving up to 0.75 TB of traffic a month. Every plan includes the same advanced detection, unlimited rules and full dashboard access.
.More than one site
One account, one invoice. Every site keeps its own dashboard, its own rules and its own allowlist
Websites protected
Discount
Per site, monthly
Billed yearly
You keep
1
—
€158
€158
—
2
3%
€154
€3,686
€114
3
7%
€147
€5,301
€399
4
7%
€147
€7,068
€532
5
15%
€135
€8,075
€1,425
10
15%
€135
€16,150
€2,850
Figures shown for the Core band. The same discounts apply to Growth and Scale
.How the model works
An attack should not raise your bill
Most bot protection is metered per request. A scraping campaign or a credential-stuffing run is
billed to you before it is blocked – you pay for the attack twice. Here you pay for the traffic
your real visitors generate, and nothing else.
What happens
Metered per request
ADPAL
A scraper hits 400,000 product pages overnight
Added to your metered total
Blocked at the perimeter. Not billed
Black Friday traffic triples for four days
Overage charge
No change unless your monthly band changes
You launch a second brand site
A second contract
Same account, 3% off both
You need next year’s figure for the budget
Depends on traffic
You already know it
Finance asks what this line item is
A range
One number
.What you are paying for
Advanced detection, running before your server does
Every request is scored against behaviour, browser, network, request sequence and endpoint signals, and a decision is reached in under 50 milliseconds — before your origin renders anything at all. Bad traffic never reaches you, so your server load falls instead of rising.
Detection updates itself as attack techniques change. There is no rule library for you to maintain and no tuning cycle to schedule.
Detection happens on our side, from signals the request already carries:
Deployment
Point your DNS at the managed reverse proxy — live in hours, then a short monitoring period before enforcing. CMS-integrated deployment is available through hosting partners
Privacy
Cookieless, no cross-site tracking profiles, EU (Frankfurt) data residency
Good bots stay in
Search engines, uptime monitors and AI crawlers are verified properly — not by the name they claim
Included on every plan
Nothing is held back for a higher tier
Every plan includes advanced detection, unlimited rules, full dashboard access and guided onboarding.
Advanced detection
Behaviour, browser, network, request sequence and endpoint signals, scored on every request
Bad traffic never reaches your origin, so your server load drops instead of rising
Unlimited rules and allowlists
Block, allow or watch anything you like. No rule quota and no add-on fee
Search engines, uptime monitors and AI crawlers verified properly, not by the name they claim
Per-request event history, top targeted pages, blocked categories and country breakdown
Your developer, your agency and your host can all have access. Seats are never billed
Layer 7 DDoS and rate limiting
Application-layer floods absorbed at the perimeter, with per-endpoint limits you control
A setup call plus a monitoring period, so you see what would have been blocked before anything is
No client-side script on your pages and no cross-site tracking profiles of your visitors
Before you choose
Find your monthly traffic in five minutes
You do not need a developer for this. Open whichever of the three you already have.
Your hosting control panel
cPanel, Plesk and most managed hosts show “Bandwidth” or “Data transfer” for the current month on the main dashboard. Take the highest of the last three months.
Your CDN or DNS provider
If traffic already runs through a CDN, its analytics screen reports data served per month. Use the total, including cached responses.
.Learn more
Work out what you actually need
Guide
How to protect your login page from bots
Guide
How to block AI crawlers
COMPARE
WAF, CAPTCHA or bot protection: which layer solves what
.FAQ
Pricing FAQ
How much does bot protection cost for a small business?
ADPAL starts at €158 a month for a site serving up to 0.75 TB a month, billed yearly at €1,900. Busier sites move up a band: €170 a month to 1.5 TB, €180 a month to 3 TB. Month-to-month billing is also available at €185. Above 3 TB we quote on your traffic profile.
What happens if I go over my band?
Nothing is cut off and nothing is charged mid-term. If your traffic settles into a higher band we move you up at renewal and tell you before we do. One busy month does not change your plan.
Do you charge per request, per page view or per visitor?
None of them. Your price is set by the traffic your site actually serves in a month, so it does not move with request volume, seasonal peaks or attack traffic.
What counts as a website?
One domain you connect to ADPAL. Two sites take 3% off, three or four take 7%, five or more take 15%. All of them sit on one account and one invoice, and each keeps its own dashboard, its own rules and its own allowlist.
What do I actually commit to?
As much or as little as you like. Month-to-month is €185 with no minimum term. Paying three months up front brings it to €170 a month, and paying for the year brings it to €158 — a saving of €320 over twelve months.
Is there a setup fee?
No. Onboarding, the monitoring period and the guided go-live are included in every plan.
How long does deployment take, and will it break anything?
Point your DNS at the managed reverse proxy — live in hours, then a short monitoring period before enforcing. CMS-integrated deployment is available through hosting partners. During monitoring, ADPAL watches and reports but blocks nothing, so you see exactly what would have been stopped before anything is.
Where is my data processed?
Cookieless, no cross-site tracking profiles, EU (Frankfurt) data residency. Per-request events are logged because they power your dashboard; they are never used to build cross-site profiles of your visitors. Full detail is in our Trust Center.
Can I try it before I commit?
Start with the free site scan. It reports what share of your traffic is automated and which pages the bots are hitting, without changing anything on your site.
Stop paying to serve traffic that was
never going to buy
Pick a band, pick a term, and go live this week. No procurement cycle, no quote request, no security team required
No credit card
Free check