Software Products
A reference for Webscale's software tiers and CloudEDGE Security
Purpose:
This page lists feature and allowance specifications for Webscale's Application Delivery Software tiers (Essentials, Advanced, Premier, Ultra) and for CloudEDGE Security, a standalone security product for applications hosted outside Webscale. These tiers pair with a Cloud Hosting plan to make up a full Webscale subscription. They are a different tier system from the hosting plan sizes (Essentials V4, Standard V4, Pro V4, Pro V4 HA, Enterprise) described on the Plans reference pages, and the two should not be confused.
CloudEDGE Security
CloudEDGE Security is the Webscale security product for customers whose applications are hosted outside Webscale. It deploys Webscale's security layer in front of an existing application, providing origin protection, DDoS defense, bot management, a Web Application Firewall, OWASP Top 10 coverage, role based access control, carding attack protection and data loss prevention. It does not include the platform's performance and delivery features. Those are available through the Webscale Platform Software tiers, paired with a Webscale hosting plan.
Allowances and capabilities
| Allowance | Included |
|---|---|
| Data Transfer | 50 GB |
| Requests | 25 M |
| Application Hostnames | 5 (guidance) |
| Elastic Data Plane | Shared |
| CDN | |
| Custom Web Controls | 20 |
| Traffic Viewer storage | 50 GB |
| Monitors | 5 |
- Metered allowances are consumption based above the included amount. Application Hostnames counts are guidance. See the Application Hostnames entry in the features glossary below.
Included security features
| Feature | Included |
|---|---|
| Origin Protection (App Shield) | Level 1 |
| Auto HTTPS | |
| Bring Your Own SSL Certificate | |
| Geo-blocking | |
| DDoS Protection | |
| Origin Certificates | |
| CSP | |
| Rate Limiting | Basic |
| Bot Management | |
| Bot Mitigation | |
| WAF (WAAP) | Basic |
| OWASP Protection | |
| Role-based Access Control | |
| Carding Attack Protection | |
| Trusted Proxies | |
| Secure Access | |
| Data Loss Prevention |
Included observability features
| Feature | Included |
|---|---|
| Traffic Viewer storage | 50 GB |
| Event Logs (audit) | 5 years, no additional cost |
| Session Tracking | |
| Real User Monitoring (RUM) | |
| Additional Online Logs | |
| Archived Logs | |
| Monitors | 5 |
| Custom Log Capture |
Who CloudEDGE Security is for
Customers running an application outside Webscale who need a managed security layer in front of it. Customers hosting on Webscale should use the Webscale Platform Software tiers instead.
Webscale Platform Software
The Webscale Platform Software is sold in tiers: Essentials, Advanced, Premier, and Ultra. Each tier includes a fixed set of performance, security and observability capabilities, along with a defined allowance for metered resources.
Essentials
The entry Platform tier, suitable for smaller applications. Includes the core performance and delivery features of the platform with a baseline security and observability layer.
Advanced
Adds dynamic site caching, image optimization, expanded Traffic Viewer storage, session tracking, real user monitoring, archived logs, OWASP protection, CSP, and expanded Web Controls and Monitors allowances.
Premier
Adds Site Splicing, Bot Management and Bot Mitigation, Advanced WAF, role based access control, carding attack protection, data loss prevention and custom log capture.
Ultra
Adds a dedicated elastic data plane, Level 3 origin protection, Advanced rate limiting, Trusted Proxies, Secure Access, and the largest included allowances for every metered feature.
- Every Platform Software tier is paired with a Webscale hosting plan. Available pairings and upgrade rules are published on the Plans and Pricing page.
Platform Software comparison matrix
Headline allowances
| Allowance | Essentials | Advanced | Premier | Ultra |
|---|---|---|---|---|
| Included Data Transfer | 50 GB | 250 GB | 500 GB | 1,000 GB |
| Included Requests | 25 M | 125 M | 250 M | 500 M |
| Application Hostnames | 2 | 5 | 20 | 100 |
| Elastic Data Plane | Shared | Shared | Shared | Dedicated |
- All metered allowances are consumption based above the included amount. Rates are published on the Plans and Pricing page. Application Hostnames counts are guidance. See the Application Hostnames entry in the features glossary below.
Performance and delivery
| Feature | Essentials | Advanced | Premier | Ultra |
|---|---|---|---|---|
| Predictive Auto-scaling | ||||
| Self-healing | ||||
| Load Balancing | ||||
| Elastic Data Plane | Shared | Shared | Shared | Dedicated |
| CDN | ||||
| Dynamic Site Cache | Not included | 1 GB | 5 GB | 10 GB |
| Dynamic Site Cache Rules | Not included | 1 | 5 | 10 |
| Custom Web Controls | Not included | 10 | 20 | 100 |
| Site Splicing | Not included | Not included | ||
| Custom Microsites | Not included | 1 (5 MB) | 5 (20 MB) | 10 (50 MB) |
| Image Optimization | Not included | 100K/mo | 200K/mo | 500K/mo |
Security
| Feature | Essentials | Advanced | Premier | Ultra |
|---|---|---|---|---|
| Origin Protection (App Shield) | Level 1 | Level 2 | Level 2 | Level 3 |
| Auto HTTPS | ||||
| Bring Your Own SSL | ||||
| Geo-blocking | ||||
| DDoS Protection | ||||
| Origin Certificates | ||||
| CSP | Not included | |||
| Rate Limiting | Not included | Basic | Basic | Advanced |
| Bot Management | Not included | Not included | ||
| Bot Mitigation | Not included | Not included | ||
| WAF (WAAP) | Basic | Basic | Advanced | Advanced |
| OWASP Protection | Not included | |||
| Role-based Access Control | Not included | Not included | ||
| Carding Attack Protection | Not included | Not included | ||
| Trusted Proxies | Not included | Not included | Not included | |
| Secure Access | Not included | Not included | Not included | |
| Data Loss Prevention | Not included | Not included |
Observability
| Feature | Essentials | Advanced | Premier | Ultra |
|---|---|---|---|---|
| Traffic Viewer storage | 10 GB | 50 GB | 75 GB | 100 GB |
| Event Logs (audit, 5yr free) | ||||
| Session Tracking | Not included | |||
| Real User Monitoring (RUM) | Not included | |||
| Additional Online Logs | Not included | Not included | ||
| Archived Logs | Not included | |||
| Monitors (included) | Not included | 5 | 10 | 50 |
| Custom Log Capture | Not included | Not included |
- Event Logs are configuration audit logs. They are retained at no additional cost for 5 years across all products and tiers. Other Traffic Viewer log types such as request logs and custom logs count against the tier's GB storage allowance.
Add-ons
| Add-on | Essentials | Advanced | Premier | Ultra |
|---|---|---|---|---|
| Varnish | Optional | Optional | Optional | Optional |
Per-tier detail
Each tier follows the same pattern: a positioning statement, headline allowances, and a note on who the tier is for.
Essentials
Essentials is the entry Webscale Platform tier. It includes the core performance and delivery capabilities of the platform, such as predictive auto-scaling, self-healing, load balancing and CDN, along with a baseline security layer covering Auto HTTPS, Bring Your Own SSL, geo-blocking, DDoS protection, origin certificates and basic WAF. It is built for smaller applications and lower-traffic workloads.
| Allowance | Included |
|---|---|
| Included Data Transfer | 50 GB |
| Included Requests | 25 M |
| Application Hostnames | 2 (guidance) |
| Elastic Data Plane | Shared |
| CDN | |
| Custom Web Controls | 0 |
| Traffic Viewer storage | 10 GB |
| Monitors | 0 |
Who this tier is for
- Customers running smaller applications who need Webscale's hosting and core delivery features with a baseline security and observability layer. Customers who need dynamic site caching, image optimization, expanded Traffic Viewer storage, RUM or stronger security should consider Advanced.
Advanced
Advanced is the mid Platform tier. It builds on Essentials by adding dynamic site caching at 1 GB, image optimization at 100K transforms per month, expanded Traffic Viewer storage, session tracking, real user monitoring, archived logs, OWASP protection, CSP support, Level 2 origin protection, basic rate limiting, and expanded Custom Web Controls and Monitors allowances.
| Allowance | Included |
|---|---|
| Included Data Transfer | 250 GB |
| Included Requests | 125 M |
| Application Hostnames | 5 (guidance) |
| Elastic Data Plane | Shared |
| CDN | |
| Dynamic Site Cache | 1 GB (1 rule) |
| Custom Microsites | 1 (up to 5 MB) |
| Image Optimization | 100K transforms/month |
| Custom Web Controls | 10 |
| Traffic Viewer storage | 50 GB |
| Monitors | 5 |
| Origin Protection | Level 2 |
Who this tier is for
- Mid-sized applications that need strong performance, baseline security and full observability. Customers who need Site Splicing, bot management, advanced WAF, role based access control, carding attack protection or data loss prevention should consider Premier.
Premier
Premier is the upper Platform tier, built for high-traffic applications with substantial performance, security and observability needs. It adds Site Splicing, Bot Management and Bot Mitigation, Advanced WAF, role based access control, carding attack protection, data loss prevention and custom log capture.
| Allowance | Included |
|---|---|
| Included Data Transfer | 500 GB |
| Included Requests | 250 M |
| Application Hostnames | 20 (guidance) |
| Elastic Data Plane | Shared |
| CDN | |
| Dynamic Site Cache | 5 GB (5 rules) |
| Custom Microsites | 5 (up to 20 MB) |
| Image Optimization | 200K transforms/month |
| Custom Web Controls | 20 |
| Traffic Viewer storage | 75 GB |
| Monitors | 10 |
| WAF | Advanced |
| Origin Protection | Level 2 |
Who this tier is for
- High-traffic applications that need the platform's full delivery and security capabilities at substantial scale, while running on a shared data plane. Customers who need a dedicated data plane, Level 3 origin protection, advanced rate limiting, trusted proxies or secure access should consider Ultra.
Ultra
Ultra is the top Platform tier. It is set apart from Premier by a dedicated elastic data plane, Level 3 origin protection, Advanced rate limiting, trusted proxies and secure access, along with the largest included allowances for every metered feature. Ultra is built for the highest-traffic and most security-sensitive applications on the Webscale platform.
| Allowance | Included |
|---|---|
| Included Data Transfer | 1,000 GB |
| Included Requests | 500 M |
| Application Hostnames | 100 (guidance) |
| Elastic Data Plane | Dedicated |
| CDN | |
| Dynamic Site Cache | 10 GB (10 rules) |
| Custom Microsites | 10 (up to 50 MB) |
| Image Optimization | 500K transforms/month |
| Custom Web Controls | 100 |
| Traffic Viewer storage | 100 GB |
| Monitors | 50 |
| WAF | Advanced |
| Origin Protection | Level 3 |
| Rate Limiting | Advanced |
Who this tier is for
- Customers with the highest performance, isolation and security requirements, including those who need a dedicated data plane for compliance or traffic isolation reasons.
Features glossary
Each feature is defined once below and used identically across CloudEDGE Security, the Platform comparison matrix and the per-tier detail above.
Performance and delivery
| Feature | Definition | Available in |
|---|---|---|
| Predictive Auto-scaling | Uses automation and predictive analytics to increase or decrease application resources to maintain consistent performance without over-allocation. | All Platform tiers. Not in CloudEDGE Security. |
| Self-healing | An extension of auto-scaling that ensures failed application components are promptly replaced to avoid timeouts and error pages. | All Platform tiers. Not in CloudEDGE Security. |
| Load Balancing | Actively distributes requests across application servers and routes around servers experiencing performance or availability issues. | All Platform tiers. Not in CloudEDGE Security. |
| Elastic Data Plane | The intermediary between web browsers and your application. A shared data plane uses IP addresses socialized with other applications. A dedicated data plane uses addresses unique to your application and can deploy data plane assets into a public subnet of your own VPC for enhanced security. | Shared on CloudEDGE Security, Essentials, Advanced and Premier. Dedicated on Ultra. |
| CDN | A globally distributed set of servers that delivers cacheable content from a location close to the visitor, reducing latency and origin load. Includes standard caching rules for static content and media. Additional caching behavior can be configured using Custom Web Controls. | All products. |
| Application Hostnames | The hostnames to which an application responds. No hard limit is enforced today. Included counts are guidance. Auto HTTPS provisions one certificate per group of roughly 150 hostnames. | CloudEDGE Security 5, Essentials 2, Advanced 5, Premier 20, Ultra 100. |
| Data Transfer | The aggregate volume of data delivered through the Webscale Data Plane to end users in a billing period. Overage is consumption based. | All products. 50, 50, 250, 500, 1,000 GB. |
| Included Requests | Total number of HTTP requests handled by the Webscale Data Plane in a billing period. Overage is consumption based. | All products. 25 M, 25 M, 125 M, 250 M, 500 M. |
| Dynamic Site Cache | A cache located in the Webscale Data Plane that provides fast access near application servers. Combined with the CDN it can substantially reduce origin load. | Advanced 1 GB, Premier 5 GB, Ultra 10 GB. |
| Dynamic Site Cache Rules | Rules that determine what is cacheable, for how long, and on which browser or user state. Multiple cache versions of the same resource can be maintained by request characteristics. | Advanced 1, Premier 5, Ultra 10. |
| Custom Web Controls | A configurable policy and rules engine in the Webscale Control Panel that combines conditions with actions applied to requests proxied by the Data Plane. Used for both security and performance customization. | CloudEDGE Security 20, Advanced 10, Premier 20, Ultra 100. Not in Essentials. |
| Site Splicing | Combines multiple origins into a single site, letting different application components serve specific paths or roles within one customer-facing site. | Premier, Ultra. |
| Custom Microsites | Lets content be injected into a site without modifying the application. For PWA or headless applications, microsites can serve the entire application. | Advanced 1 site up to 5 MB, Premier 5 sites up to 20 MB, Ultra 10 sites up to 50 MB. |
| Image Optimization | Automated image management that delivers an appropriately sized image to each device, served from the nearest cache. Overage is consumption based. | Advanced 100K/mo, Premier 200K/mo, Ultra 500K/mo. |
Security
| Feature | Definition | Available in |
|---|---|---|
| Origin Protection (App Shield) | Because the Data Plane sits between users and the application, application servers are not directly exposed. Level 1 hides server addresses behind the Data Plane. Level 2 manages a cloud Security Group or Firewall so only Webscale proxies can connect. Level 3 places a dedicated Data Plane on the same private network as application servers, isolating them from the internet. | Level 1 on CloudEDGE Security and Essentials. Level 2 on Advanced and Premier. Level 3 on Ultra. |
| Auto HTTPS | Webscale automatically obtains and renews site certificates so HTTPS stays functional. Adding a new hostname triggers automatic certificate handling. | All products. |
| Bring Your Own SSL Certificate | The Data Plane supports management of one or more customer-provided certificates alongside Auto HTTPS. | All products. |
| Geo-blocking | Requests are geo-located by origin country and Web Controls rules can allow or block access by country. | All products. |
| DDoS Protection | Always-on protection that limits the maximum number of concurrent requesters and uses dynamic address sets to block repeat requesters. Predictive Auto-scaling of the Data Plane absorbs the attacks. | All products. |
| Origin Certificates | Long-lasting certificates that protect communication from the Data Plane to application servers, avoiding downtime caused by unexpected expiry of publicly trusted certificates. | All products. |
| CSP (Content Security Policy) | Over-the-top CSP support independent of the application's implementation, separating policy from the site so injected attacks cannot succeed. | CloudEDGE Security, Advanced, Premier, Ultra. Not in Essentials. |
| Rate Limiting | Rejects requests from a single source that exceed a defined rate for a defined blocking period. Basic provides a built-in rate with automatic enforcement. Advanced provides per-area configurable rates and configurable blocking periods. | Basic on CloudEDGE Security, Advanced and Premier. Advanced on Ultra. Not in Essentials. |
| Bot Management | Separates legitimate bots from malicious ones using Webscale-provided, dynamically updated address sets. Automatically detects and categorizes malicious bot behavior. | CloudEDGE Security, Premier, Ultra. |
| Bot Mitigation | A coordinated set of mechanisms for distinguishing automated traffic from legitimate users and challenging or blocking suspect requests. Today it combines reCAPTCHA integration, user-agent classification rules configured in Web Controls, and forthcoming ASN-level blocking. These mechanisms will be unified under a single feature surface in a future release. | CloudEDGE Security, Premier, Ultra. |
| WAF (WAAP) | The Cloud WAF protects applications by examining HTTP requests and blocking or modifying malicious ones. Basic provides automatic blocking of known attack signatures. Advanced provides custom configurable conditions for advanced attacks. | Basic on CloudEDGE Security, Essentials and Advanced. Advanced on Premier and Ultra. |
| OWASP Protection | Automated protection against the OWASP Top 10 and other common web vulnerabilities such as SQL injection, XSS and CSRF. | CloudEDGE Security, Advanced, Premier, Ultra. Not in Essentials. |
| Role-based Access Control (RBAC) | Fine-grained permission assignment for users managing application configurations and other resources. | CloudEDGE Security, Premier, Ultra. |
| Carding Attack Protection (CAP) | Uses knowledge of user behavior on ecommerce sites to recognize and stop carding attacks before they occur. | CloudEDGE Security, Premier, Ultra. |
| Trusted Proxies | Lets another technology in front of the Data Plane be registered as trusted, so requests passing through it are correctly identified and can be restricted to come only from a trusted proxy. | CloudEDGE Security, Ultra. |
| Secure Access | Role-based permissions applied to sections of the application to restrict access from the general internet to authenticated, role-authorized users. | CloudEDGE Security, Ultra. |
| Data Loss Prevention | Prevents exfiltration of data by limiting access or request volume to sensitive parts of the site. | CloudEDGE Security, Premier, Ultra. |
Observability
| Feature | Definition | Available in |
|---|---|---|
| Traffic Viewer | A real-time view inside the Webscale Control Panel of CDN requests, application server requests, Data Plane requests, monitor-generated events, configuration changes and custom application logs. Storage is measured in gigabytes and retention duration is configurable per application and account. | All products. |
| Event Logs (configuration audit) | Logs that record configuration changes and access to the Webscale platform, including who made what changes and when. This is the platform's audit trail. | All products. Retained 5 years at no additional cost. |
| Session Tracking | Automatically tracks user sessions and makes session IDs available in the Traffic Viewer so requests belonging to a session can be analyzed together. | CloudEDGE Security, Advanced, Premier, Ultra. |
| Real User Monitoring (RUM) | Collects performance data from end users' browsers to inform Core Web Vitals tuning and measure the impact of site changes. | CloudEDGE Security, Advanced, Premier, Ultra. |
| Additional Online Logs | All online logs are viewed via the Traffic Viewer. Online log storage counts against the Traffic Viewer GB allowance for the tier, and retention is configurable. | CloudEDGE Security, Premier, Ultra. |
| Archived Logs | Logs that no longer need to be viewable in the Traffic Viewer but must be retained for audit. Available for download via API. Archived log storage is billed on consumption separately from Traffic Viewer storage. | CloudEDGE Security, Advanced, Premier, Ultra. |
| Monitors | A configurable observer of an application component, used to notify or take action when a condition is met, for example average response time exceeding a threshold for critical pages. | CloudEDGE Security 5, Advanced 5, Premier 10, Ultra 50. Not in Essentials. |
| Custom Log Capture | A feature of the Webscale Monitoring Agent that captures logs from files in real-time and stores them as online custom logs viewable in the Traffic Viewer. Captured logs count against the tier's Traffic Viewer GB allowance. | CloudEDGE Security, Premier, Ultra. |
Add-ons
| Feature | Definition | Available in |
|---|---|---|
| Varnish | An industry-standard caching solution integrated with Webscale's core features. Webscale operates and maintains the Varnish layer, so customers get its caching benefits with no maintenance overhead and automatic failover. | Optional on all Platform tiers. Not offered with CloudEDGE Security. |