Cloud Workload Protection (CWP) Purchase Guide
The purpose of this document is to provide a practical guide for understanding, selecting, and purchasing the appropriate Cloud Workload Protection (CWP) solution based on specific security requirements, deployment environments, and cost considerations.
It is intended for:
- Cloud administrators
- Security teams
- Procurement or compliance officers
This guide outlines available CWP editions, core features, pricing models, and deployment recommendations to help organizations make informed decisions and ensure effective protection of their cloud workloads.
Cloud Workload Protection (CWP) is a cloud-native security solution designed to protect your cloud servers (virtual machines) from attacks, vulnerabilities, and misconfigurations.
It provides:
- Real-time threat detection
- Malware and ransomware protection
- Vulnerability scanning
- Asset management
- Compliance support (e.g., for regulatory standards like MLPS)
CWP works by deploying lightweight agents on your cloud or on-prem servers, offering centralized visibility and protection across your workloads.
Protection Licenses Overview
The following table provides the billing instructions for different CWPP protection licenses. For the features in different editions, see Features in Different Editions.
| Protection License | Billing Instructions |
|---|---|
| CWPP Basic | Free of charge. Servers with a CWPP agent enjoy basic protection. A CWPP agent is automatically installed for the purchased CVM, Lighthouse, and ECM by default. |
| CWPP Pro | Monthly subscription: 12 USD/license/month. The subscription fee is deducted directly when the order is placed. |
| CWPP Ultimate | Monthly subscription: 27 USD/license/month. The subscription fee is deducted directly when the order is placed. It cannot be downgraded to CWPP Pro. |
Protection licenses are available to all Converge Cloud users after identity verification.
Purchase Method
Protection licenses can be purchased through the CWPP purchase page. You can select the server to be bound when purchasing a license, or bind a server later after purchasing a license.
Overdraft and Renewal
If auto-renewal has been set, but the deduction is unsuccessful because the relevant account has an insufficient balance or is overdrawn (balance below 0), the original license will be automatically unbound from the server (which means the protection will be stopped) and will enter a 30-day isolation period. If the license is not renewed during this period, the license order will expire and terminated.