The hybrid billing mode of Security Center combines subscription with pay-as-you-go billing. After you purchase a subscription, you can enable elastic protection. When the actual usage of edition services, anti-ransomware, Agentic EDR, Agentic CSPM, or attack surface management exceeds the purchased quota, the excess is automatically billed on a pay-as-you-go basis. This eliminates the need for frequent manual capacity expansion and ensures that security protection is not interrupted when the quota is exhausted.
Before you begin
A Security Center subscription has been purchased.
Enable or disable elastic protection
The hybrid billing mode (Burstable Protection/Full Protection) is enabled by default after you purchase the relevant subscription.
Non-Attack Management:
Log on to the Security Center console.
On the Overview page, in the Subscription section, turn on or turn off the Burstable Protection switch.
Attack Management:
Log on to the Security Center console.
On the Overview page, in the Attack Surface Management section, turn on or turn off the Full Protection switch.
Available services and features
Edition services
Billing method: Billing is based on the number of protected cores or servers, depending on the edition. For unit prices, see the following table.
Billing rules: After Burstable Protection is enabled, if the actual number of protected servers exceeds the subscription quota, the excess is charged based on the elastic quota pricing.
Edition | Subscription quota | Elastic quota |
Anti-virus | CNY 5/core/month | CNY 0.010404/core/hour |
Advanced Edition | CNY 60/server/month | CNY 0.166667/server/hour |
Enterprise | CNY 150/server/month | CNY 0.416667/server/hour |
Ultimate | CNY 150/server/month + CNY 5/core/month | CNY 0.416667/server/hour + CNY 0.013889/core/hour |
Anti-ransomware
Billing method: Billing is based on the purchased anti-ransomware capacity.
Billing rules: After Burstable Protection is enabled, if the actual backup capacity exceeds the subscription capacity, the excess is charged based on the elastic protection pricing.
Subscription quota: CNY 0.3/GB/month.
Elastic quota: CNY 0.0009/GB/hour.
Agentic EDR
Billing method: Billing is based on the number of seat licenses purchased. Binding one server consumes one seat license.
Billing rules: After Burstable Protection is enabled, if the actual number of bound seats exceeds the purchased subscription regular seats, the excess is charged based on the elastic protection seats pricing.
Agentic EDR regular seats: CNY 50/seat/month.
Agentic EDR elastic protection seats: CNY 0.104167/seat/hour.
Agentic Cloud Platform Configuration Check
Billing method: Billing is based on the number of billable cloud service instances that are scanned, verified, and remediated.
NoteAn "instance" refers to a specific network device or application instance, such as a bucket in OSS, an ECS instance, or an ECS security group.
Instances are divided into billable and non-billable categories. Billable instances include buckets in OSS and ECS instances. Non-billable instances include ECS security groups.
Billing rules: After Burstable Protection is enabled, if the actual number of scanned instances exceeds the subscription quota, the excess is charged on a pay-as-you-go basis by default. The price is CNY 0.5/instance/day.
Associated rules:
Subscription: The price is CNY 10/instance/month.
Pay-as-you-go: The price is CNY 0.5/instance/day.
Attack surface management
Billing method: Billing is based on the number of protected asset authorizations. Each authorization includes a certain number of Credits.
NoteCredits are the scanning quota unit for attack surface management. Each scan consumes a certain number of Credits, which are used for attack path mapping of exposed assets, intelligent risk analysis, and generation of intelligent risk remediation suggestions. The actual number of Credits consumed is subject to the system's actual usage.
Billing rules: After Full Protection is enabled, if the number of authorizations or Credits exceeds the subscription quota, the excess is charged based on the overage pricing.
Subscription quota: CNY 30/authorization/month. Each authorization includes 6,000 Credits.
Overage pricing:
Excess authorizations: CNY 3/day/authorization. Each excess authorization includes 200 Credits.
Excess Credits: CNY 1/100 Credits.
Service expiration and termination
After the subscription expires, the following rules apply to your rights and billing:
Burstable Protection: Immediately expires and billing stops.
Bill settlement: The elastic quota/capacity consumed on the expiration date will be billed on the following day, and the bill will be generated and pushed.
Data handling: The system will clear historical data in accordance with the standard data retention policy of the subscription service. For specific rules, see Expiration or unsubscription.