Billing overview-Agent Security Center( ASC)-阿里云帮助中心

Before using Agent Security Center (also referred to as Agent Security Center), understand the billing model, billable items, and arrears handling rules to properly plan usage costs and avoid business impact from service suspension due to arrears.

Overview

Agent Security Center uses a pay-as-you-go billing model, billing based on actual usage, with bills delivered the next day (T+1).

Billable items

Skills detection

Billing unit: Billed by file count. Each Skill file detected counts as 1 instance.
Accumulation method: If multiple files are passed in a single API call, billing is accumulated based on the total number of files.
Example: A single API call with 10 files passed will be counted as 10 instances.
Billing condition: Charges are incurred only when the detection task is successfully completed. If file upload fails or the detection task fails to execute, no charge is incurred.
Pricing: ¥10/instance .

Agent risk detection

Free during the public preview period. Both scheduled automatic detection and manual detection features are available free of charge for a limited time.

Agent real-time defense (defense plugin)

Billing unit: Defense fees consist of two components: defense seat fee and Credits overage fee.

Billable item	Price	Description
Defense seat fee	CNY 0.42/seat/hour	Hours less than 1 hour are billed as 1 hour. Each seat receives 300 free Credits per day.
Credits overage fee	CNY 0.015/Credit	Pay-as-you-go. Charges start after the free Credits quota is exceeded.

Example: With a single seat used for 8 hours per day, the seat fee is CNY 3.36/day (0.42 x 8), with 300 free Credits included. No overage fee is incurred within the free Credits quota.
If the 300 Credits quota is exceeded, the excess is billed at the Credits overage rate.

AI Red Teaming

Billing unit: Billed by scan count. Each detection counts as 1 instance.
Accumulation method: If the same object is detected multiple times, billing is accumulated based on the actual number of executions.
Example: If you perform detection 10 times on an AI agent in Model Studio, it will be counted as 10 instances.
Billing condition: Charges are incurred only when the detection task is successfully completed. If the detection task fails or is aborted, no charge is incurred.
Pricing: ¥1,000/instance .

Agent Loop

The Agent Loop feature uses a pay-as-you-go billing model. You are charged based on actual log storage capacity and the number of hours the data is stored.

Billing unit: Billed by storage capacity per hour. Storage under 1 TB in a given hour is billed as 1 TB.
Metering: Storage is archived every hour. Hourly measurements accumulate throughout the day, and the bill for that day is pushed the next day (T+1).
Example: If your storage is stable at 3 TB for the entire day, the daily measurement is 24 hours × 3 TB = 72 TB·hours, and the daily fee is CNY 144 (72 TB·hours × CNY 2/TB/hour).
Pricing: CNY 2/TB/hour.

Note

Control your call volume based on actual needs and manage your budget to avoid cost overruns.

Arrears

When the account balance is insufficient, Agent Security Center enters an arrears state. The impacts are as follows:

Paid features such as Skills detection and AI Red Teaming are unavailable. Historical data can still be viewed.
Agent Loop: Log delivery stops. Historical logs remain viewable.
No new charges are incurred during the suspension period. After you settle the overdue payment, paid features are automatically restored to normal operation.
After 15 days of service suspension due to arrears, the instance is released. After the instance is released, the system cleans up historical data according to the Data cleanup rules.
Important
If you have purchased the service suspension extension, the instance is released after (15 + extension duration) days. The system sends a notification before release. Please check the notification to avoid business impact.

Unsubscription

Agent Security Center supports manual unsubscription. For specific operations, see Purchase and unsubscribe from Agent Security Center.

Unsubscription entry:
1. Access the Security Center console - Agent Security Center - Agent Overview. At the top of the left side of the page, select the region where the asset to be protected is located: Chinese Mainland or Outside Chinese Mainland.
2. In the Protection Status area in the upper-right corner of the page, click Opt out.
Post-unsubscription impact: The instance is released immediately after unsubscription. Data is cleaned up according to the Data cleanup rules.

Note

We recommend that you clear log data before unsubscribing. Charges still apply on the unsubscription day, and no further charges are incurred from the following day.

Data cleanup rules

Instance release

Arrears: After arrears occur, there is a 15-day suspension retention period during which the instance is not released.
Important
Alibaba Cloud provides a service suspension extension that extends the suspension retention period for cloud services. For more information, see Service suspension protection for overdue payments. For example, if the suspension extension you obtained is 10 days, the suspension retention period for Agent Security Center is 10 + 15 = 25 days.
Manual unsubscription: No retention period, the instance is released immediately.

Data cleanup

After an instance is released due to account arrears or manual unsubscription, the system provides a historical data retention period. After the retention period expires, some data will be permanently deleted and cannot be recovered.

Scenario	Instance status	Data cleanup policy	Feature impact
Arrears - Within retention period	Suspension retention (instance not released)	Skills detection: Data remains intact. AI Red Teaming: Data remains intact. Agent Loop: Log delivery stops. Existing logs remain viewable.	Paid features such as Skills detection are unavailable. AI Red Teaming: Historical report data can be read. New tasks cannot be created. Agent Loop: Log delivery stops. Existing logs remain viewable. Note Paid features are automatically restored after settling the overdue payment.
Arrears - After retention period	Instance released immediately	Skills detection: Retained for 30 days after release. After 30 days, Skills detection history and results are automatically cleared (cannot be recovered). Other data is unaffected. AI Red Teaming: Retained for 30 days after release. After 30 days, historical tasks and report data are cleared (cannot be recovered). Agent Loop: Logs are deleted at T+3 or 24:00 UTC+8 (whichever comes first) after the instance is released. Deleted logs cannot be recovered.	Skills detection: Paid features such as Skills detection are unavailable. AI Red Teaming: Historical report data cannot be read and new tasks cannot be created. Agent Loop: Log delivery has stopped. Logs are deleted after the instance is released.
Manual unsubscription	Instance released immediately