Detection, blocking and the way out of a false positive are free. To keep receiving the threat address database and binary updates, and to see the deeper views: US$59 per server per year, or US$6 per month — subscribe for one if you only have one. No other plans, no hidden fees.
Not included
Payments are handled by Paddle (credit card / PayPal, taxes and invoices included) — your card number never touches our systems. Listed prices exclude tax; at checkout Paddle adds whatever tax applies where you are (VAT, GST and the like). When a subscription lapses, core protection keeps running — detection and blocking do not stop. Pro pages are locked, and the console says plainly how many days that host has gone without updates: nothing is taken away quietly.
Buying for many hosts at once, or need a company purchasing process (quote, contract)? Email support@ofuyuan.com.
⭐ This section has no Free/Pro split. Detection and blocking are free, so every source below is read — and acted on — on a host with no subscription too.
Apache, nginx, SSH, FTP, xrdp and macOS login logs; what each one reads and catches is on Features.
| Feature | Free | Pro |
|---|---|---|
| Built-in rule detection + automatic blocking (nftables / ipset / iptables) | ✅ | ✅ |
| Unblocking and the whitelist (the way out of a false positive) | ✅ | ✅ |
| Blocklist, IP management, live dashboard status | ✅ | ✅ |
| Alerts: email, syslog, the console's notification log (daily digest included) | ✅ | ✅ |
| Intrusion alerts: backdoor traces, an SSH password likely guessed, suspicious outbound connections (notify only, nothing done automatically) | ✅ | ✅ |
| Shared threat address database (the daily signed list of attacking sources) | ❌ | ✅ |
| OTA auto-update | ❌ | ✅ |
| Resource alerts (CPU / memory / disk over threshold) | ❌ | ✅ |
| Resource charts (history) | ❌ | ✅ |
| Site analytics | ❌ | ✅ |
| The detection rules page: read, change and reset the thresholds (after expiry the thresholds stay in force and detection is unchanged) | ❌ | ✅ |
| Scanning historical logs | ❌ | ✅ |
| Extra scan directories (the built-in ones are always scanned) | ❌ | ✅ |
| Feature | Free | Pro |
|---|---|---|
| Bind to your account + see every one of your hosts on the Fleet Overview (with version and 24-hour event count) | ✅ | ✅ |
| Per-host detail, event history, IP lookup | ❌ | ✅ |
| Cross-host event and block data export | ❌ | ✅ |
| Fleet Overview charts (24-hour event distribution, daily blocking trend) | ❌ | ✅ |
What happens when a subscription expires, how cancelling and refunds work, how the threat address database works — see the FAQ.
