GCP Cloud Armor Pricing (2026)
Web Application Firewall and network security services protect your applications from common web exploits, DDoS attacks, and unauthorized access. They filter malicious traffic before it reaches your application layer. Cloud Armor protects applications behind Google Cloud Load Balancer with pre-configured WAF rules and adaptive protection. Starting from $0.0000/hr ($0.00/mo) for Networking Service Extensions Load Balancer Callouts.
Key Features
- ✓Protection against OWASP Top 10 vulnerabilities (SQLi, XSS, etc.)
- ✓Custom and managed rule sets
- ✓Rate limiting and bot detection
- ✓DDoS protection at network and application layers
- ✓Real-time traffic monitoring and logging
Common Use Cases
Web Application Protection
Shield web applications from SQL injection, cross-site scripting, and other common attack vectors.
API Security
Protect API endpoints with rate limiting, IP allowlisting, and request validation rules.
Compliance
Meet PCI DSS, HIPAA, and other compliance requirements with managed security rule sets and audit logging.
On-Demand Pricing
Pay-as-you-go pricing with no upfront commitment. You are billed per hour of usage and can start or stop at any time. Hourly rates start at $0.0000/hr ($0.00/mo) for Networking Service Extensions Load Balancer Callouts.
| Instance | Price/hr | Price/mo |
|---|---|---|
| Regional Internal Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - |
| Cloud Load Balancer Forwarding Rule Minimum for London (europe-west2) | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Networking Cloud Nat Data Processing | $0.0450 | $32.85 |
| Global External Proxy Network Load Balancer Outbound Data Processing for South Carolina (us-east1) | $0.0080 | $5.84 |
| Regional External Application Load Balancer Forwarding Rule Additional for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Iowa (us-central1) | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Iowa (us-central1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for London (europe-west2) | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Belgium (europe-west1) | - | - |
| Regional External Application Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Networking Edge Cache Data Transfer from Oceania | $0.0650 | $47.45 |
| Regional External Proxy Network Load Balancer Outbound Data Processing for London (europe-west2) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for London (europe-west2) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Sydney (australia-southeast1) | - | - |
| Networking Cloud Armor Requests (Media CDN) | $0.0000 | $0.00 |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 |
| Cross Regional Internal Application Load Balancer Inbound Data Processing for Frankfurt (europe-west3) | - | - |
| Networking Cloud DNS Routing Policy Query | $0.0000 | $0.00 |
| Regional External Application Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - |
| Cross Regional Internal Proxy Network Load Balancer Outbound Data Processing for Sydney (australia-southeast1) | - | - |
| Regional External Application Load Balancer Forwarding Rule Minimum for Oregon (us-west1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for Load Balancer | $0.0500 | $36.50 |
| Regional Internal Proxy Network Load Balancer Outbound Data Processing for Montréal (northamerica-northeast1) | - | - |
| Authorization Policy | $5.0000 | $3,650.00 |
| Cloud Load Balancer Forwarding Rule Additional Global | $0.0100 | $7.30 |
| Regional Internal Passthrough Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Montréal (northamerica-northeast1) | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Belgium (europe-west1) | - | - |
| Global External Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Networking Cloud CDN Traffic Cache Data Transfer to North America | $0.0800 | $58.40 |
| Networking Cloud Armor Rule Regional | $1.0000 | $730.00 |
| Regional Internal Application Load Balancer Inbound Data Processing for Montréal (northamerica-northeast1) | - | - |
| Networking Cloud VPN Tunnel Europewest1 | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Global External Application Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Montréal (northamerica-northeast1) | - | - |
| Networking Cloud Armor Requests | $0.0000 | $0.00 |
| Regional Internal Application Load Balancer Outbound Data Processing for Belgium (europe-west1) | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for CDN | $0.0250 | $18.25 |
| Cross Regional Internal Proxy Network Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Additional for Sydney (australia-southeast1) | - | - |
Pricing by Instance Family
LoadBalancing
159 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Regional Internal Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - |
| Cloud Load Balancer Forwarding Rule Minimum for London (europe-west2) | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Global External Proxy Network Load Balancer Outbound Data Processing for South Carolina (us-east1) | $0.0080 | $5.84 |
| Regional External Application Load Balancer Forwarding Rule Additional for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Iowa (us-central1) | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Iowa (us-central1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for London (europe-west2) | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Belgium (europe-west1) | - | - |
| Regional External Application Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for London (europe-west2) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for London (europe-west2) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Sydney (australia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 |
| Cross Regional Internal Application Load Balancer Inbound Data Processing for Frankfurt (europe-west3) | - | - |
| Regional External Application Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - |
| Cross Regional Internal Proxy Network Load Balancer Outbound Data Processing for Sydney (australia-southeast1) | - | - |
| Regional External Application Load Balancer Forwarding Rule Minimum for Oregon (us-west1) | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for Load Balancer | $0.0500 | $36.50 |
| Regional Internal Proxy Network Load Balancer Outbound Data Processing for Montréal (northamerica-northeast1) | - | - |
| Cloud Load Balancer Forwarding Rule Additional Global | $0.0100 | $7.30 |
| Regional Internal Passthrough Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Montréal (northamerica-northeast1) | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Belgium (europe-west1) | - | - |
| Global External Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Regional Internal Application Load Balancer Inbound Data Processing for Montréal (northamerica-northeast1) | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - |
| Global External Application Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Montréal (northamerica-northeast1) | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Belgium (europe-west1) | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for CDN | $0.0250 | $18.25 |
| Cross Regional Internal Proxy Network Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Additional for Sydney (australia-southeast1) | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Frankfurt (europe-west3) | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Belgium (europe-west1) | - | - |
| Global External Proxy Network Load Balancer Outbound Data Processing for London (europe-west2) | - | - |
| Regional Internal Proxy Network Load Balancer Forwarding Rule Minimum for Sydney (australia-southeast1) | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Singapore (asia-southeast1) | - | - |
| Regional External Passthrough Network Load Balancer Outbound Data Processing for Sydney (australia-southeast1) | - | - |
| Regional External Application Load Balancer Outbound Data Processing for Tokyo (asia-northeast1) | - | - |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Additional for South Carolina (us-east1) | $0.0100 | $7.30 |
| Cross Regional Internal Application Load Balancer Inbound Data Processing for Tokyo (asia-northeast1) | - | - |
Nat
3 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud Nat Data Processing | $0.0450 | $32.85 |
| Networking Cloud Nat Gateway Uptime | $0.0014 | $1.02 |
| Networking Private Nat Data Processing | $0.0450 | $32.85 |
EdgeCacheEgress
6 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Edge Cache Data Transfer from Oceania | $0.0650 | $47.45 |
| Networking Edge Cache Data Transfer from Latin America | $0.0400 | $29.20 |
| Networking Edge Cache Data Transfer from Europe | $0.0200 | $14.60 |
| Networking Edge Cache Data Transfer from India | $0.0400 | $29.20 |
| Networking Edge Cache Data Transfer from Asia | $0.0400 | $29.20 |
| Networking Edge Cache Data Transfer from Other | $0.0400 | $29.20 |
Armor
5 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud Armor Requests (Media CDN) | $0.0000 | $0.00 |
| Networking Cloud Armor Rule Regional | $1.0000 | $730.00 |
| Networking Cloud Armor Requests | $0.0000 | $0.00 |
| Networking Cloud Armor Policy Regional | $5.0000 | $3,650.00 |
| Networking Cloud Armor Policy | $5.0000 | $3,650.00 |
DNS
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud DNS Routing Policy Query | $0.0000 | $0.00 |
AuthzPolicy
3 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Authorization Policy | $5.0000 | $3,650.00 |
| Authorization Rule | $1.0000 | $730.00 |
| Authorization Policy Requests for Internal Load Balancer | $0.0000 | $0.00 |
CDNCacheEgress
4 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud CDN Traffic Cache Data Transfer to North America | $0.0800 | $58.40 |
| Networking Cloud CDN Traffic Cache Data Transfer to Europe | $0.0800 | $58.40 |
| Networking Cloud CDN Traffic Cache Data Transfer to Other | $0.0900 | $65.70 |
| Networking Cloud CDN Traffic Cache Data Transfer to Asia | $0.0900 | $65.70 |
VPNTunnel
4 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud VPN Tunnel Europewest1 | - | - |
| Networking Cloud VPN Tunnel Uswest1 | - | - |
| Networking Cloud VPN Tunnel Australiasoutheast1 | - | - |
| Networking Cloud VPN Tunnel Uscentral1 | - | - |
DataTransfer
6 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Data Transfer inter region Intercontinental (Excl Oceania, Indonesia) | $0.1200 | $87.60 |
| Networking Data Transfer for traffic between Cloud and Hybrid | $0.0200 | $14.60 |
| Networking Data Transfer for advanced data networking | $0.0200 | $14.60 |
| Networking Data Transfer inter region within North America | $0.1200 | $87.60 |
| Networking Data Transfer inter region within Oceania | - | - |
| Networking Data Transfer inter region Intercontinental (all other) | $0.1900 | $138.70 |
ServiceExtensionLbCallouts
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Service Extensions Load Balancer Callouts | $0.0000 | $0.00 |
MediaCDN
3 instance types available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Media CDN Capacity Reservation per Tbps for Europe | - | - |
| Media CDN Capacity Reservation per Tbps for Oceania | - | - |
| Media CDN Capacity Reservation per Tbps for North America | $20000.0000 | $14,600,000.00 |
SecurityPolicy
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud Load Balancing Features User Defined Header | $0.0000 | $0.00 |
NCCSpoke
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Network Connectivity Center Spoke Hours VPC Network Spoke | $0.1000 | $73.00 |
Cdn
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Cloud Cdn Cache Lookups | $0.0000 | $0.00 |
PrivateServiceConnect
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Private Service Connect Partner Select End Point | $0.0100 | $7.30 |
TrafficDirector
1 instance type available
| Instance | Price/hr | Price/mo |
|---|---|---|
| Networking Traffic Director Endpoint | $0.0007 | $0.51 |
Reserved Instance & Savings Plans Pricing
Commit to 1 or 3 years for lower hourly rates.
| Instance | Price/hr | Price/mo | 1yr RI/hr | 3yr RI/hr |
|---|---|---|---|---|
| Regional Internal Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - | - | - |
| Cloud Load Balancer Forwarding Rule Minimum for London (europe-west2) | - | - | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - | - | - |
| Networking Cloud Nat Data Processing | $0.0450 | $32.85 | - | - |
| Global External Proxy Network Load Balancer Outbound Data Processing for South Carolina (us-east1) | $0.0080 | $5.84 | - | - |
| Regional External Application Load Balancer Forwarding Rule Additional for Singapore (asia-southeast1) | - | - | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Iowa (us-central1) | - | - | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Iowa (us-central1) | - | - | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for London (europe-west2) | - | - | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Belgium (europe-west1) | - | - | - | - |
| Regional External Application Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - | - | - |
| Networking Edge Cache Data Transfer from Oceania | $0.0650 | $47.45 | - | - |
| Regional External Proxy Network Load Balancer Outbound Data Processing for London (europe-west2) | - | - | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for London (europe-west2) | - | - | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Sydney (australia-southeast1) | - | - | - | - |
| Networking Cloud Armor Requests (Media CDN) | $0.0000 | $0.00 | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 | - | - |
| Cross Regional Internal Application Load Balancer Inbound Data Processing for Frankfurt (europe-west3) | - | - | - | - |
| Networking Cloud DNS Routing Policy Query | $0.0000 | $0.00 | - | - |
| Regional External Application Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - | - | - |
| Cross Regional Internal Proxy Network Load Balancer Outbound Data Processing for Sydney (australia-southeast1) | - | - | - | - |
| Regional External Application Load Balancer Forwarding Rule Minimum for Oregon (us-west1) | - | - | - | - |
| Cross Regional Internal Application Load Balancer Proxy Instance Charge for Tokyo (asia-northeast1) | - | - | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for Load Balancer | $0.0500 | $36.50 | - | - |
| Regional Internal Proxy Network Load Balancer Outbound Data Processing for Montréal (northamerica-northeast1) | - | - | - | - |
| Authorization Policy | $5.0000 | $3,650.00 | - | - |
| Cloud Load Balancer Forwarding Rule Additional Global | $0.0100 | $7.30 | - | - |
| Regional Internal Passthrough Network Load Balancer Outbound Data Processing for Singapore (asia-southeast1) | - | - | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Minimum for Tokyo (asia-northeast1) | - | - | - | - |
| Regional External Proxy Network Load Balancer Forwarding Rule Additional for Montréal (northamerica-northeast1) | - | - | - | - |
| Regional External Passthrough Network Load Balancer Inbound Data Processing for Belgium (europe-west1) | - | - | - | - |
| Global External Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - | - | - |
| Networking Cloud CDN Traffic Cache Data Transfer to North America | $0.0800 | $58.40 | - | - |
| Networking Cloud Armor Rule Regional | $1.0000 | $730.00 | - | - |
| Regional Internal Application Load Balancer Inbound Data Processing for Montréal (northamerica-northeast1) | - | - | - | - |
| Networking Cloud VPN Tunnel Europewest1 | - | - | - | - |
| Global External Proxy Network Load Balancer Inbound Data Processing for Oregon (us-west1) | - | - | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Iowa (us-central1) | - | - | - | - |
| Global External Application Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - | - | - |
| Regional External Proxy Network Load Balancer Inbound Data Processing for London (europe-west2) | - | - | - | - |
| Regional Internal Application Load Balancer Proxy Instance Charge for Montréal (northamerica-northeast1) | - | - | - | - |
| Networking Cloud Armor Requests | $0.0000 | $0.00 | - | - |
| Regional Internal Application Load Balancer Outbound Data Processing for Belgium (europe-west1) | - | - | - | - |
| Networking Cloud Armor Enterprise Annual: Data Processing Fee for CDN | $0.0250 | $18.25 | - | - |
| Cross Regional Internal Proxy Network Load Balancer Inbound Data Processing for Singapore (asia-southeast1) | - | - | - | - |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Minimum for South Carolina (us-east1) | $0.0250 | $18.25 | - | - |
| Cross Regional Internal Proxy Network Load Balancer Forwarding Rule Additional for Sydney (australia-southeast1) | - | - | - | - |
How Cloud Armor Pricing Works
On-Demand
Pay per hour with no long-term commitment. Ideal for variable workloads and development environments.
Reserved / Committed Use
Commit to 1 or 3 years for significant discounts.
Spot / Preemptible
Use spare capacity at steep discounts. Best for fault-tolerant, batch, and stateless workloads.
Monthly Cost Examples
Frequently Asked Questions
What is GCP Cloud Armor?
GCP Cloud Armor is a cloud service offered by Google Cloud Platform. It provides various configurations (200 pricing tiers available) with pay-as-you-go and committed-use pricing options.
How much does GCP Cloud Armor cost per month?
Prices range from $0.00/month for Networking Service Extensions Load Balancer Callouts to $14,600,000.00/month for Media CDN Capacity Reservation per Tbps for North America on On-Demand pricing in us-east1.
Does GCP Cloud Armor have a free tier?
GCP offers various free tier options. Check the official GCP pricing page for the most current free tier details for Cloud Armor.
How many GCP Cloud Armor pricing tiers are available?
There are 200 pricing tiers available for GCP Cloud Armor. These range from entry-level configurations to high-performance options for enterprise workloads.
What pricing models does GCP Cloud Armor offer?
GCP Cloud Armor offers On-Demand (pay-per-hour, no commitment), Reserved/Committed Use (1-3 year commitments for significant discounts), and in some cases Spot/Preemptible pricing for interruptible workloads at the lowest cost.
What security services are included in cloud pricing?
Basic IAM, network firewalls, and encryption at rest are generally included. Advanced services like WAF, DDoS protection, key management (HSM-backed), and threat detection are billed separately — typically per rule, per request, or per GB analyzed.