- Home
- Web Application Firewall Software
- Tencent Cloud WAF
Tencent Cloud WAF
Shenzhen, China
Plans and prices
Premium
2,500 QPS · 20 domains · 50 Mbps default bandwidth · 2 primary domains
Read 20 Sep 2026 · intl.cloud.tencent.com
Enterprise
5,000 QPS · 30 domains · 100 Mbps default bandwidth · 3 primary domains
Read 20 Sep 2026 · intl.cloud.tencent.com
Ultimate
10,000 QPS · 40 domains · 200 Mbps default bandwidth · 4 primary domains
Read 20 Sep 2026 · intl.cloud.tencent.com
Exclusive
Custom pricing
Read 20 Sep 2026 · intl.cloud.tencent.com
Extra domain package
up to 10 domains including one primary domain
Read 15 Oct 2026 · intl.cloud.tencent.com
Extra capacity package
1,000 additional QPS · 25 Mbps SaaS bandwidth · Advanced Edition
Read 15 Oct 2026 · intl.cloud.tencent.com
Advanced Edition
2,500 QPS · 50 Mbps · 2 primary domains · 20 total domains
Read 15 Oct 2026 · intl.cloud.tencent.com
API Security Advanced Edition
API security enabled · SaaS or cloud-native WAF
Read 15 Oct 2026 · intl.cloud.tencent.com
Enterprise Edition
5,000 QPS · 100 Mbps · 3 primary domains · 30 total domains
Read 15 Oct 2026 · intl.cloud.tencent.com
On the record
- Anti-tampering
- Core pages can be cached in WAF so cached content can substitute for a tampered origin page.intl.cloud.tencent.com · read 15 Oct 2026
- BGP access
- WAF advertises 30 dedicated BGP IP lines with intelligent node scheduling to reduce access latency.intl.cloud.tencent.com · read 15 Oct 2026
- Bot management
- AI and rules classify crawlers and bots so customers can allow friendly bots while delaying or blocking malicious scraping.intl.cloud.tencent.com · read 15 Oct 2026
- CC attack defense
- Smart CC protection analyzes abnormal origin responses and behavior, then combines access controls, bot checks and rate controls.intl.cloud.tencent.com · read 15 Oct 2026
- Company legal entity
- Tencent Cloud Computing (Beijing) Co., Ltd. is a PRC limited company established in 2010 and wholly owned by Tencent.www1.hkexnews.hk · read 15 Oct 2026
- Company profile
- LinkedIn lists Tencent Cloud as founded in 2013, headquartered in Nanshan District, Shenzhen, with more than 10,001 employees.linkedin.com · read 15 Oct 2026
- Data leakage prevention
- The product describes hiding the application origin, protecting during intrusion and replacing or masking sensitive data afterward.intl.cloud.tencent.com · read 15 Oct 2026
- Deployment modes
- It offers SaaS WAF using DNS CNAME proxying and cloud-native WAF that mirrors HTTP/HTTPS traffic from Tencent CLB.intl.cloud.tencent.com · read 15 Oct 2026
- Documentation depth
- The documentation index includes getting started, operations, security, integrations, FAQs, SLA, privacy/DPA material and API categories for assets, billing, rules, logs and security.intl.cloud.tencent.com · read 15 Oct 2026
- External origins
- SaaS WAF can protect public servers at Tencent Cloud, other clouds or IDC; mainland domains require ICP filing.cloud.tencent.cn · read 15 Oct 2026
- Hybrid cloud
- Enterprise and higher cloud-native editions can deploy protection nodes in a customer IDC or private cloud with centralized policies and logs.cloud.tencent.cn · read 15 Oct 2026
- Integrations
- Cloud-native WAF integrates with Tencent CLB, API Gateway and supported cloud-function or APISIX traffic paths.cloud.tencent.com · read 15 Oct 2026
- License status
- WAF is presented as Tencent's proprietary hosted service; the public Apache 2.0 licenses apply to SDK repositories rather than the WAF service itself.staticintl.cloudcachetci.com · read 15 Oct 2026
- Limit: abuse complaints
- Trustpilot reviewers allege inadequate enforcement against scam, phishing and illegal-gambling domains hosted on Tencent infrastructure; these complaints concern Tencent hosting broadly, not specifically WAF.trustpilot.com · read 15 Oct 2026
- Limit: G2 reviewers
- G2 reviewers mention upgrade-only changes, difficult serverless or microservice learning, occasional lag and lengthy large-company implementations.g2.com · read 15 Oct 2026
- Limit: Gartner reviewers
- Reported weaknesses include localization and global-community gaps, complex advanced configuration, costly bot modules, limited reporting and AI false positives needing manual tuning.gartner.com · read 15 Oct 2026
- LLM SDK/API
- An SDK/API mode provides LLM content checks without moving a business domain to WAF, including prompt-injection and sensitive-data checks.cloud.tencent.com · read 15 Oct 2026
- Logging limitation
- Default attack logs are available, while full access-log search and retention require Tencent CLS log storage.intl.cloud.tencent.com · read 15 Oct 2026