Start with Free. Pro is optional.

Detection, automatic blocking, attack alerts and the multi-host overview are all in Free, for any number of hosts, forever. Consider Pro when you want the threat address database and automatic updates.

Free
Free forever
Any number of hosts · not a trial
  • Detection + automatic blocking
  • Unblocking and the whitelist — the way out of a false positive
  • Attack and intrusion alerts
  • Hub Fleet Overview

Full feature comparison ↓

Pro
US$59 / host / year
Or US$6 per month (monthly has no refunds; cancel anytime). One subscription per host, from one.
  • Everything in Free
  • Threat address database: attack sources gathered regularly, blocked before they reach you
  • OTA binary auto-updates
  • Deeper views: site analytics, detection rules, resource monitoring, per-host detail on Hub

Full feature comparison ↓

When a subscription lapses, core protection keeps running — detection and blocking do not stop. Pro pages are locked, and the console says plainly how many days that host has gone without updates: nothing is taken away quietly.

Full feature comparison

Log sources we can analyse

⭐ This section has no Free/Pro split. Detection and blocking are free, so every source below is read — and acted on — on a host with no subscription too.

Apache, nginx, SSH, FTP, xrdp and macOS login logs; what each one reads and catches is on Features.

Agent — the one running on each of your hosts

FeatureFreePro
Built-in rule detection + automatic blocking (nftables / ipset / iptables)✅✅
Unblocking and the whitelist (the way out of a false positive)✅✅
Blocklist, IP management, live dashboard status✅✅
Alerts: email, syslog, the console's notification log (daily digest included)✅✅
Intrusion alerts: backdoor traces, an SSH password likely guessed, suspicious outbound connections (notify only, nothing done automatically)✅✅
Shared threat address database (the daily signed list of attacking sources)❌✅
OTA auto-update❌✅
Resource alerts (CPU / memory / disk over threshold)❌✅
Resource charts (history)❌✅
Site analytics❌✅
The detection rules page: read, change and reset the thresholds (after expiry the thresholds stay in force and detection is unchanged)❌✅
Scanning historical logs❌✅
Extra scan directories (the built-in ones are always scanned)❌✅

Hub — managing multiple hosts in one place

FeatureFreePro
Bind to your account + see every one of your hosts on the Fleet Overview (with version and 24-hour event count)✅✅
Per-host detail, event history, IP lookup❌✅
Cross-host event and block data export❌✅
Fleet Overview charts (24-hour event distribution, daily blocking trend)❌✅

If you subscribe to Pro

No other plans, no hidden fees. Payments are handled by Paddle (credit card / PayPal, taxes and invoices included) — your card number never touches our systems. Listed prices exclude tax; at checkout Paddle adds whatever tax applies where you are (VAT, GST and the like).

Buying for many hosts at once, or need a company purchasing process (quote, contract)? Email support@ofuyuan.com.

FAQ

What happens when a subscription expires, how cancelling and refunds work, how the threat address database works — see the FAQ.