Enterprise bot protection pricing: what each vendor publishes
A pricing model comparison across DataDome, Kasada, Arkose Labs, HUMAN, Netacea, CHEQ, Akamai, Imperva, Cloudflare, hCaptcha Enterprise and reCAPTCHA Enterprise. What is published, what is quoted, and how each vendor meters.
Buyers part-way through an evaluation routinely find that most vendors will not give a number until a discovery call is booked. This page collects what is published, what is quoted, and how each vendor meters.
Two notes before the table. Published prices change, so treat these as a starting point and confirm against each vendor's own page. And Prosopo competes in this market and publishes its own pricing. Worth declaring, on a page about pricing transparency.
Who publishes a number
Three vendors give you something to work with without a sales call.
DataDome publishes an Essentials tier from around $3,830 per month. It is the most important number in the category, because everybody else gets benchmarked against it whether they publish or not.
Google reCAPTCHA Enterprise publishes per-assessment pricing with a monthly free allowance. Google cut that allowance sharply in 2025, and that pushed a lot of teams into an evaluation. Our reCAPTCHA pricing calculator will do the arithmetic.
hCaptcha publishes free and Pro tiers and quotes Enterprise. The hCaptcha pricing calculator covers the published tiers.
Prosopo publishes the whole ladder, from a free tier at 10,000 monthly verifications through to enterprise, on the pricing page.
Who quotes
Everybody else. Kasada, Arkose Labs, HUMAN, Netacea, CHEQ, Cloudflare Bot Management, Akamai Bot Manager and Imperva Advanced Bot Protection all require a conversation before a number.
That is standard for enterprise software. It does have three practical consequences worth planning for.
You cannot build a shortlist on cost. You have to run four sales processes to compare four vendors, which takes a quarter.
The bundled vendors are hardest to compare. When Bot Manager is a line in an Akamai CDN contract or Bot Management is inside a Cloudflare Enterprise plan, the marginal cost of bot protection is not separable, so you have no basis for comparing it against a standalone quote and no leverage on it at renewal.
Year two is unpriced. The first-year number is often shaped by a new-logo discount. Ask for the renewal uplift cap in writing during the first negotiation, not the second.
How each vendor meters
The metering model matters more than the headline number, because it determines what happens when your traffic grows or an attack spikes.
| Vendor | Pricing published | Meters on | Managed service |
|---|---|---|---|
| DataDome | Essentials from ~$3,830/mo | Protected traffic volume | Included |
| HUMAN Security | Quoted | Traffic volume and coverage | Included |
| Kasada | Quoted | Traffic volume, bundle | Included in bundle |
| Arkose Labs | Quoted | Bundle with SOC | Included in bundle |
| CHEQ | Quoted, per product | Per product purchased | Varies by product |
| Netacea | Quoted | Onboarding + platform + support + usage bands | Included |
| hCaptcha Enterprise | Free and Pro published | Verifications | Limited |
| reCAPTCHA Enterprise | Published | Per assessment | None |
| Cloudflare Bot Management | Quoted in Enterprise contract | Bundled | None |
| Akamai Bot Manager | Quoted in CDN contract | Bundled | Varies |
| Imperva Advanced Bot Protection | Quoted, usually bundled | Bundled | Varies |
| Prosopo | Full ladder published | Verifications and requests | Direct engineering access |
Forrester singled out two of these structures. Netacea's is described as among the most intricate in the market, with separate fees for onboarding, platform, support and usage bands. CHEQ was marked down for requiring customers to buy each product separately. Kasada's bundle was called out as a strength.
The question to ask about attack spikes
Nobody asks this one until they are already in the middle of an incident.
If you are metered on requests or assessments, a large automated attack increases your bill. The vendor is doing its job and stopping the traffic, and you are paying for every stopped request. Some contracts cap this. Most do not mention it.
Ask each vendor directly what happens to the invoice during a volumetric bot attack, and have the answer written into the contract.
Prosopo pricing
Our full pricing is on the pricing page, with no form to fill in first. Free at 10,000 monthly verifications, Professional up to 1M, and Enterprise above that with unlimited verifications, unlimited sites, Access Rules, admin API, per-request audit logs and a custom SLA.
Publishing the full ladder means a buyer can model the cost of Prosopo without booking a call. Across the rest of the category, that call is the only way to get a number at all.
One honest steer on fit: if you run a small site and Cloudflare Turnstile with the Cloudflare WAF is holding, that combination is free and worth staying on. Prosopo earns its place when something is getting through and you need to know precisely what.
Related
Want a number without a discovery call?
Tell us your monthly request volume and which parts of your site you need covered. We will send back a figure from our published ladder, not a range.
Frequently Asked Questions
What is the pricing model comparison between hCaptcha Enterprise, DataDome and Arkose Labs?
All three meter differently. DataDome publishes an Essentials tier from around $3,830 per month and prices on protected traffic volume. Arkose Labs quotes a bundle that includes its managed SOC, so the number covers service as well as software. hCaptcha publishes free and Pro tiers and quotes Enterprise separately. Only DataDome gives you a public starting number, so it functions as the reference price for the whole category.
How much does enterprise bot protection cost?
For the Forrester-evaluated vendors, expect a floor around $3,830 per month based on DataDome's published Essentials tier, rising into five and six figures annually with volume and how much of the site is covered. Every other evaluated vendor quotes, so a like-for-like comparison requires running the same traffic volume and the same list of endpoints through each sales process.
Which bot protection vendors publish their pricing?
DataDome publishes an Essentials entry price. Google reCAPTCHA Enterprise publishes per-assessment pricing. hCaptcha publishes free and Pro but quotes Enterprise. Prosopo publishes its full ladder from free through enterprise. Kasada, Arkose Labs, HUMAN, Netacea, CHEQ, Cloudflare Bot Management, Akamai and Imperva all quote.
Why do most bot management vendors hide their pricing?
Because pricing is set per deal against traffic volume, how much of the site is covered and how much managed service is included, and because a published floor anchors every subsequent negotiation. The practical effect for a buyer is that year-two pricing is a negotiation you have not had yet. Model it before you sign.
Are there bot and fraud prevention services with completely transparent pricing pages?
Prosopo publishes its full ladder from a free tier through enterprise on its pricing page. Cloudflare Turnstile is free at typical volumes. DataDome publishes an entry tier. Beyond those, transparency in this category is thin.