How wafpricing.com collects, dates, and verifies prices

Source hierarchy

Every numeric claim on the site is taken from one of three sources, in this strict order of preference.

• 1. Vendor pricing page. The vendor's own published pricing page is the canonical source. If the vendor publishes a rate, we use it verbatim with the URL and retrieval date stamped on the deep-dive page.
• 2. Cloud or app marketplace listing. AWS Marketplace and Azure Marketplace publish per-hour and per-GB rates that the vendor itself sometimes does not list. FortiWeb Cloud is the live example. We cite the listing URL and retrieval date.
• 3. Anonymised buyer-shared quote. For quote-only vendors we collect bands from buyers who consent to share an anonymised contract value. These are clearly labelled and dated. They are never used to compute a per-request rate.

Re-verification cadence

Quote-only handling rules

What “illustrative example, not a real company” means

Worked examples on the site use a fixed synthetic profile (for example 100M requests per month, 5 managed rule groups, bot management on). The profile is not anonymised from a real buyer. It exists so a reader can compare vendors on equal inputs. Every worked example carries the “(illustrative example, not a real company)” label.

What we will not publish

We will not publish inferred rates for quote-only vendors. We will not republish a buyer's identified contract value, even with permission, because the buyer's vendor relationship would suffer. We will not publish a discount percentage that requires assuming a vendor's list rate when no list rate exists.

Full source list (14 vendors)