One price, per firewall, on a VM you already run. No per-hour endpoint
charge, no per-GB data-processing tax, no per-rule tiers — just a flat
monthly licence in GBP.
£179/month per
firewall — volume pricing reduces the per-firewall rate as your fleet grows.
Three tiers, one firewall NVA underneath. Free is a real entry tier; the 14-day Trial unlocks the full feature set; Licensed is unlimited everything on a flat per-firewall licence.
Identity-aware L7 — SNI / FQDN filtering, no TLS decryption
All 25 compliance frameworks — advise or enforce
Unlimited log-export sinks to your own SIEM
Metrics, history, audit log & multi-stream live logs
Cloud-object imports — AWS IP ranges, Azure Service Tags
One pane of glass across the whole fleet
What's never on the bill
No per-GB data-processing tax
No per-hour endpoint fee
No per-rule or per-feature charge
Prices per firewall, per month, in your chosen currency (GBP, USD or EUR)
— each a real, billable price. Volume pricing reduces the per-firewall rate
as your fleet grows. Plus the Linux VM you run it on — your own cloud bill,
which a cloud-native firewall's NAT and inspection endpoints also require.
Flat, with no per-GB, per-hour or per-rule charge.
The wedge
What you don't pay for.
The cloud-native firewall's bill is built from meters that never stop. Enforza removes all of them — the price is flat and does not move with your traffic.
No per-GB data-processing tax
Cloud-native firewalls — AWS Network Firewall, Azure Firewall, Google Cloud NGFW — charge for every GB they inspect. That meter never stops and grows with traffic. Enforza is $0/GB.
No per-hour endpoint fee
The managed firewall and its NAT each bill a per-hour, per-AZ rate before a single byte flows. Enforza is a flat per-firewall licence on a VM you already run.
No second meter for NAT
On AWS and GCP, filtered egress means stacking a managed firewall and a separate NAT gateway — two products, two per-GB meters. Enforza does secure NAT and identity-aware L7 in one appliance.
No limits, no asterisks
The flat price isn't just "no per-GB". Nothing about your firewall moves
the line — not its size, its address space, or how much it protects.
Not CPU or instance-size limitedRun the firewall on any VM size — a small instance or a large one — and the price is unchanged. Mega-NGFW VMs and cloud-native firewalls meter by vCPU, instance size or endpoint-hour. Enforza does not.
Not IP or object limitedNo cap on the protected IPs or network objects on the Licensed plan, and no per-IP charge. Size your address space and object library to your network, not to a price tier.
Not protected-device limitedWe don't licence by the number of devices or hosts your firewall protects. Why charge by how many things sit behind it? One flat licence per firewall, however much it guards.
Not complicated metered pricingOne flat line per firewall — predictable, like buying a box. Not the per-hour plus per-GB plus per-AZ plus per-add-on maze you reconcile at the end of every month.
Cloud-native firewall rates are directional and dated 2026-06-14; AWS NAT
Gateway and Network Firewall are separate products with separate per-GB
rates. Run your own numbers in the calculator.
Support that's in the price — and more when you want it.
Basic support is included in every plan, at no extra cost. Premium support and hourly consultancy are available as paid add-ons — talk to us and we'll scope the right level.
Basic support
IncludedPart of every plan
Email support is included in the base price of every plan — Free, Trial and Licensed. No add-on, no separate line.
Premium support
AvailablePaid add-on
Faster response and priority handling for teams that need it. Available as an add-on — talk to us about the right level for your fleet.
Hourly consultancy
AvailablePaid, by the hour
Hands-on help with design, migration off a cloud-native firewall, or compliance roll-out — billed by the hour. Book a call to scope it.
A firewall is a single Enforza NVA — one lightweight Linux VM running in your own cloud network, on AWS, Azure, Google Cloud or on-prem. You are billed per firewall, flat, per month. The price does not change with how much traffic the firewall processes, how many rules it runs, or which features you switch on.
Is it really flat — no per-GB charge?
Yes. Enforza is a flat per-firewall subscription priced from £179/month per firewall, with volume pricing that reduces the per-firewall rate as your fleet grows. There is no per-GB data-processing tax, no per-hour endpoint fee, and no per-rule or per-feature charge. The only other cost is the Linux VM you run it on — your own cloud bill — which a cloud-native firewall's NAT and inspection endpoints also require.
How does the volume pricing work?
The per-firewall price reduces with volume — the more firewalls you run, the less each one costs. It is a flat per-firewall rate at each volume tier, with no contract minimum and no bundled commitment. The headline figure is the standard unit price; larger fleets move to the reduced tier automatically.
Which currencies can I pay in?
Enforza is billed in pounds sterling (GBP), US dollars (USD) or euros (EUR). Each currency has its own real, billable price — the figure you select on this page is the price you pay, not a converted estimate. Use the currency switcher to see the price in your currency.
What is included in the Free tier?
Free is a genuine self-serve tier, not a teaser: one firewall in your own network with L3/L4 egress control, network objects, and an owner-only single user — no card required. The paid features — identity-aware L7 (SNI/FQDN) filtering, compliance frameworks, log export to your SIEM, metrics and multi-stream live logs — are not in Free; they unlock on the 14-day Trial and the Licensed plan.
How does the trial work?
The Trial gives you the full feature set for 14 days — identity-aware L7 filtering, one compliance set, one log-export sink to your own SIEM, metrics, audit log and multi-stream live logs — with single-of-each working caps (1 policy, 1 sink, 1 compliance set, 2 users). It is the way to evaluate everything Enforza does before moving to the Licensed plan.
Can I scale down — or up?
Yes. Because billing is flat per firewall with no contract minimum, you pay only for the firewalls you run: add firewalls as you grow (and the per-firewall price reduces with volume), or retire them and the bill comes down with them. There is no per-GB or per-rule meter to reconcile.
Flat, per firewall. No surprises.
One price. No per-GB tax.
From £179/month per firewall, with volume pricing that reduces the rate as your fleet grows — flat, with no per-GB data-processing tax and no per-hour endpoint fee. Start free, no card.