Currently, the Web Application Firewall (WAF) is restricted to the $499/mo Scale plan. For many growing startups, the jump from $25 to $499 is simply too steep just to get essential security.

Please consider offering WAF as a paid add-on or a per-service fee. We need the ability to instantly block attacks and unauthorized access on public Web Services without being forced into an enterprise tier we aren't ready for yet.

Allowing users to pay a smaller, modular fee to enable WAF (similar to paying for extra compute or concurrency) would secure mid-sized projects and create a great intermediate revenue stream for Render.