Free firewall. Pay for the fleet view.
Every protection in the library is open source and stays that way. LightMoon Cloud is for teams that run more than one instance and want one place to watch, tune and respond.
Hobby Available now
Free, no card needed
For side projects and watching what your firewall does.
Start free- 1 project
- 50,000 events a month
- 3 days of history
- Dashboard, live events and instance health
- 10 IP or country blocks
- Export events as CSV
Pro Coming soon
Billed monthly
For production apps that need to respond fast.
Not available yet- 5 projects
- 1 million events a month
- 30 days of history
- 100 remote rules and 5,000 blocks per project
- Fleet-wide bans
- Emergency rule feed
- False-positive tuning suggestions
- Slack, Discord and webhook alerts
Business Coming soon
Billed monthly
For companies running many services.
Not available yet- Everything in Pro
- 25 projects
- 10 million events a month
- 90 days of history
- 400 remote rules and 20,000 blocks per project
- Audit log of every change
Pro and Business aren't on sale yet. The prices are what they will cost when they open; nothing on this page takes payment today.
What each plan includes.
| Open source | Hobby | Pro soon | Business soon | |
|---|---|---|---|---|
| Protection (runs in your app) | ||||
| Managed rules, OWASP CRS, custom rules | ✓ | ✓ | ✓ | ✓ |
| Bot and anti-detect browser checks | ✓ | ✓ | ✓ | ✓ |
| Rate limits, adaptive bans, DDoS mitigation | ✓ | ✓ | ✓ | ✓ |
| Response inspection, API schema, sink guards | ✓ | ✓ | ✓ | ✓ |
| Cloud | ||||
| Projects | – | 1 | 5 | 25 |
| Events stored each month | – | 50,000 | 1,000,000 | 10,000,000 |
| History | – | 3 days | 30 days | 90 days |
| Dashboard, events and instance health | – | ✓ | ✓ | ✓ |
| Export events as CSV | – | ✓ | ✓ | ✓ |
| IP and country blocks per project | – | 10 | 5,000 | 20,000 |
| Remote rules per project | – | – | 100 | 400 |
| Fleet-wide bans | – | – | ✓ | ✓ |
| Emergency rule feed | – | – | ✓ | ✓ |
| False-positive tuning | – | – | ✓ | ✓ |
| Alerts (Slack, Discord, webhooks) | – | – | ✓ | ✓ |
| Audit log | – | – | – | ✓ |
Plans, plainly.
What counts as an event?
One blocked, challenged or monitored request, one confirmed injection, one response leak or one ban. Allowed requests are never sent.
What happens when I reach the event limit?
Your instances keep protecting your app exactly as before; they decide locally and never wait for Cloud. New events still count in your charts and still trigger fleet bans and alerts, but their individual details are not stored until the next month starts. Nothing is charged and nothing is switched off.
When can I buy Pro or Business?
They aren't on sale yet, and there is no waiting list to join. Until they open, Hobby is the only plan, and it's free.
Do you store request bodies or passwords?
No. The connector sends metadata only: method, host, path without the query string, matched rule IDs, scores, country and a truncated client IP. See Privacy for the full list.
Start with the free plan.
Connect an instance in two minutes. Upgrade when you need history, alerts or more projects.