Transparent pricing

Pay for what you protect.
Nothing more.

Two clear tiers. Flat monthly base + metered queue usage billed in arrears. No annual contracts. No hidden callout fees. Cancel anytime.

Most popular

Drop Suite

For established drop stores and mid-market brands.

$499 / month

+ $25 per 1,000 visitors queued (billed in arrears)

  • S
    Shield — HMAC-signed request authentication. Validate on your edge, server, or WooCommerce plugin. No callout per request.
  • G
    Guard — Local rate-limiting + brain-signed badlist. Stops bots, inventory hoarders, and add-to-cart spam at the edge.
  • Q
    Drop Room — Cryptographically fair Durable-Object waiting rooms hosted on *.dropify.dev. Unlimited events.
  • 25,000,000 Shield/Guard requests / month included
  • Overage: $0.10 per 10,000 requests beyond 25M
  • Open-source adapters — Cloudflare Worker, WooCommerce plugin, Node SDK
  • Live telemetry dashboard with per-drop event reports
  • Configurable tenant policy (TTL, refresh, spend limits)
  • Standard email support — 48-hour response SLA
Start Drop Suite
Enterprise

Infinite

For high-volume retailers, ticketing agencies, and brands that cannot afford downtime.

$1,999 / month

+ $15 per 1,000 visitors queued (volume rate)

  • Everything in Drop Suite
  • 150,000,000 Shield/Guard requests / month included
  • Overage: $0.05 per 10,000 requests beyond 150M
  • $15/1k queued visitors — 40% lower metered rate
  • 24/7 emergency SLA — 4-hour engineering response
  • Priority Durable Object allocation — hot-queue pre-warming
  • White-label custom waiting room domains (e.g. queue.brand.com)
  • Dedicated onboarding + quarterly business review
  • Slack Connect channel with engineering team
Start Infinite

How metered queue billing works

The base subscription covers your Shield and Guard usage up to the included request cap. Drop Room usage is billed separately — only when visitors actually enter a queue during a drop event. Usage is reported automatically and charged in arrears at the end of each billing month.

Visitors queued / event Drop Suite total (monthly) Infinite total (monthly) CrowdHandler equivalent
5,000 $499 + $125 = $624 $1,999 + $75 = $2,074 $1,500 (Plus, queue-only)
10,000 $499 + $250 = $749 $1,999 + $150 = $2,149 $1,500 (Plus, queue-only)
25,000 $499 + $625 = $1,124 $1,999 + $375 = $2,374 $3,200 (Professional, queue-only)
50,000 $499 + $1,250 = $1,749 $1,999 + $750 = $2,749 $3,200 (Professional, queue-only)

All pricing includes Shield + Guard. CrowdHandler figures are queue-only — add Arcjet ($99+/mo) or a separate bot-mitigation tool to compare fairly.

What you get with every plan

S

Shield

HMAC-signed request tokens derived from a per-tenant base secret that never leaves our brain. Adapters validate locally — zero round-trips per request. Stops replay attacks, forged requests, and credential stuffing cold.

G

Guard

Local rate-limiting enforced at the edge by a brain-signed policy blob. No per-request callout. Periodic brain sync pushes cross-tenant badlists and updated thresholds. Works offline — fails safe on the last-known-good policy.

Q

Drop Room

Cloudflare Durable-Object waiting rooms with cryptographic fairness, PoW challenge, and Turnstile verification. Hosted on *.dropify.dev. p99 admission latency under 30 ms. Scales to any visitor count.

Common questions

Do I need a Cloudflare account?

No. The brain runs in our Cloudflare account. You install a thin open-source adapter wherever you already run code — a Cloudflare Worker in your own account, the WooCommerce plugin on your server, or the Node SDK in your backend.

What counts as a "queued visitor"?

A visitor is counted when they are admitted to a Drop Room waiting room (i.e. they joined a queue and received a pass). Status polls during the wait are not counted. Each billing unit is 1,000 visitors, charged in arrears.

What counts as a Shield/Guard request?

Any request your adapter validates against the brain — a signed API call, a rate-limit check, or a policy sync. Pass-token validations are done locally and are not counted. Async telemetry pings are not counted.

Can I run multiple stores / domains?

Yes. Each tenant account can protect multiple domains and run simultaneous drop events. Usage from all domains rolls up under a single subscription.

Is there a free trial?

Reach out at hello@dropify.dev to discuss a trial period for your first drop event. We evaluate trial requests individually.

How does white-label (Infinite only) work?

We provision a custom waiting room hostname under your brand (e.g. queue.brand.com) using Cloudflare SSL for SaaS. Your visitors never see dropify.dev. Setup is handled by our team as part of onboarding.

Ready to harden your next drop?

Get set up in minutes. No contract, no sales call required.