The Security Capacity Unit (SeCU) resource plan is a cost-optimization solution for the pay-as-you-go edition of Web Application Firewall (WAF) 3.0. You can use it to offset your request processing fees and feature fees.
What are SeCU resource plans
SeCU
The total cost of the pay-as-you-go edition of WAF 3.0 consists of a request processing fee and a feature fee. WAF 3.0 measures both fees in SeCUs. For details on how the system calculates SeCUs, see Pay-as-you-go billing.
Price: The unit price of a SeCU is USD 0.01.
Billing cycle: The system measures SeCU usage hourly, aggregating data from 10:00:00 to 10:59:59.
Rounding rule: The system rounds SeCU usage up to the nearest integer. For example, if you use 0.5 SeCUs in an hour, the system bills you for 1 SeCU for that period.
SeCU resource plan
A SeCU resource plan is a prepaid package that offsets the total cost of the pay-as-you-go WAF 3.0.
Specifications: SeCU resource plans provide a 1:1 ratio for offsetting fees. For example, a resource plan with a 2,000 specification can offset the cost of 2,000 SeCUs. Larger specifications offer greater discounts.
Validity period: SeCU resource plans are valid for one month or one year.
For a one-month validity period, the following specifications are available: 2,000, 10,000, 100,000, 500,000, 1 Million, or 5 Million.
For a one-year validity period, the following specifications are available: 100,000, 500,000, 1 Million, 5 Million, 10 Million, or 50 Million.
Deduction rules: The system settles pay-as-you-go WAF fees daily and generates a bill the next day. A SeCU resource plan takes effect immediately after purchase, and the system prioritizes it for fee deductions. For example, if you purchase a resource plan on October 7, it offsets fees on bills generated on and after October 7.
Stacking rule: You can purchase multiple resource plans. If you have more than one plan of the same type, the plan that expires first is used first for deduction. If plans share an expiration date, the system uses the one purchased first.
Expiration rule: When a resource plan's quota is depleted or it expires, the system automatically switches to the pay-as-you-go model and deducts fees from your account balance.
Usage notes
Before you purchase and use a SeCU resource plan, ensure that you meet the following requirements:
You have activated a pay-as-you-go WAF 3.0 instance. If not, see Get started with WAF 3.0 to activate an instance and add your website.
Your account does not have any overdue payments. You can only use a resource plan for deductions if your account is in good standing.
Recommendations
Recommended use cases
Stable business with predictable usage: Your website traffic and feature usage are relatively stable for at least the next month, so you can estimate your monthly SeCU consumption.
Not recommended for
Volatile and unpredictable business: Your business changes frequently, including the number of websites connected to WAF or the features you use, making it difficult to estimate SeCU usage.
Extremely low monthly usage: The minimum resource plan specification is 2,000. If your monthly SeCU usage is below this amount, you forfeit the unused quota.
Short-term testing or trials: You only plan to try WAF features for a short period.
Estimate your SeCU usage
Go to the Billing Management page to view your daily SeCU usage over the last seven days, or go to the Billing Details page to get complete SeCU usage information.
Estimate your monthly SeCU usage to help you choose the right resource plan specification. For example, the figure below shows that the usage in May 2025 was 13,406 SeCUs. If your request volume remains stable and you do not change your WAF and protection settings, your estimated monthly usage is approximately 13,000 SeCUs. You can purchase one 10,000 and one 2,000 specification resource plan, and select a Validity Period of 1 Month.
Purchase a SeCU resource plan
Go to the WAF 3.0 SeCU Resource Plan buy page.
Select the Resource Plan Specifications, Validity Period, and Quantity.
Review your configuration, click Buy Now, and complete the payment. The resource plan takes effect immediately without further configuration.
Manage SeCU resource plans
View the remaining quota
Go to the Resource Plan page, set Resource Type to Resource Plan, and click the Instances tab.
Find the resource plan with WAF 3.0 SeCU Resource Plan as the product name. Check the Total Capacity and Remaining Capacity fields to view usage. If the Remaining Capacity is less than the Total Capacity, it means the plan has been used for deductions.
Set alerts for remaining quota
To receive notifications when your resource plan quota is low, click Set Remaining Quota Alert in the upper-right corner of the Resource Plan to configure alerts.
Unsubscribe from a resource plan
Resource plans do not support self-service unsubscription. If you purchased a plan within the last five days and have not used it, you can submit a ticket to request a refund.
FAQ
What kind of WAF 3.0 instance is required to use a SeCU resource plan?
You must have an active pay-as-you-go WAF 3.0 instance.
A SeCU resource plan is a prepaid package designed exclusively to offset the fees of a pay-as-you-go WAF 3.0 instance. It is not an instance extension and cannot be used standalone.
The resource plan will not take effect if:
You only purchase the SeCU resource plan without an active WAF 3.0 instance.
You only have a subscription-based WAF 3.0 instance.
Why did I receive a pay-as-you-go bill after purchasing a SeCU resource plan?
This is expected if the bill is for usage that occurred before you purchased the resource plan.
WAF 3.0 pay-as-you-go fees are settled daily for the previous day's usage. A resource plan takes effect immediately upon purchase and applies to bills generated for usage on that day and forward. It cannot be retroactively applied to past usage.
For example:
You purchase a SeCU resource plan on October 7.
The plan will be used to offset fees for your WAF usage on October 7 and any subsequent days.
You will still receive standard pay-as-you-go bills for the usage that occurred from October 1 to October 6.