Fastly Next-Gen WAF (Signal Sciences) Pricing 2026
Fastly Next-Gen WAF is the former Signal Sciences detection engine integrated into the Fastly edge platform after the 2020 acquisition. It is excellent technology: SmartParse detection, RPC-style agent, edge-deployed. The pricing is opaque. As of 2024 every tier on the fastly.com/pricing page is marked Contact sales for pricing, so we label it quote-only honestly.
Last verified June 2026
Fastly stopped publishing list rates for the Next-Gen WAF in 2024. The three Security packages are all gated behind a sales conversation. Existing Signal Sciences customers were migrated onto the Fastly contract structure.
What it costs
Fastly Next-Gen WAF does not publish a list rate. The pricing model published on the vendor site is "Three security packages, all priced quote-only". Below is the tier structure as the vendor describes it. Every numeric figure on this site is sourced; we have nothing to put in the price column except the labels the vendor uses.
- Tier 1Security CoreContact sales for pricing
- Tier 2Security Core PlusContact sales for pricing
- Tier 3Security TotalContact sales for pricing, includes DDoS and bot management
What this vendor is best for
Engineering-led teams who want the Signal Sciences detection model and edge integration with Fastly.
- Engineering-led teams who want the Signal Sciences detection model (low false positive rate, easy custom rules).
- Existing Fastly CDN customers consolidating delivery and WAF on one contract.
- API-heavy estates that benefit from per-endpoint observability the Signal Sciences agent provides.
- Buyers willing to accept the loss of list pricing in exchange for the detection quality.
Hidden costs to watch
- Bot management and DDoS sit inside the higher Security packages, with the package itself priced quote-only.
- Per-request egress on the Fastly edge is billed separately from the WAF SKU.
- Signal Sciences customers from before the Fastly acquisition were re-papered onto the Fastly contract structure; some saw renewal-pricing changes.
- Add-on signals and managed rule packs released since the Fastly acquisition price as bundle moves rather than line items.
Why no public price
Fastly published per-request and per-site rates for Signal Sciences for a while after the acquisition. By 2024 the three Security packages (Core, Core Plus, Total) were all rewritten on the pricing page to read Contact sales for pricing. Whatever a search result tells you about a per-request rate for Fastly NGWAF, it is stale. The current honest position is quote-only.
Edge vs core deployment
Fastly Next-Gen WAF can run at the Fastly edge (in front of any origin) or as the agent/module-style Signal Sciences deployment on your own origin. Pricing is structured by the chosen deployment plus the Security package; both routes are quote-only.
Source
Every number on this page is taken from https://www.fastly.com/pricing, retrieved 2026-06-19. Re-check before signing a contract; vendors change pricing without notice.