The way IP transit is priced hasn't fundamentally changed in two decades. You commit to a bandwidth level, pay a per-Mbps rate, and if you get hit by a DDoS attack, you either eat the overage charges or scramble to activate a separate mitigation service.
This model is broken. Here's why, and what we're doing differently.
The problem
Traditional transit pricing creates a perverse incentive structure. During a DDoS attack, your transit bill spikes — you're paying for the attack traffic. If you have a separate DDoS mitigation service, you need to activate it (often manually), wait for traffic to be redirected, and hope the mitigation provider can handle the volume.
Meanwhile, you're paying two vendors: your transit provider (who's happily billing you for attack traffic) and your mitigation provider (who charges based on attack size or "clean" bandwidth). The economics punish the victim.
Our approach: commit-based transit with bundled mitigation
Wirescope's pricing model is fundamentally different:
You commit to clean bandwidth. Your monthly commit is based on legitimate traffic — the traffic your applications actually need. Attack traffic is never metered, never billed, never your problem.
DDoS mitigation is included. There's no separate mitigation service to activate, no additional charge when you're under attack. Mitigation is always on, always inline, always included in your transit price.
No overage surprises. We offer flexible commit tiers with burstable options, but we never charge overages for attack traffic. If you commit to 10 Gbps of clean transit and receive a 1 Tbps attack, you pay for 10 Gbps.
The economics
For a typical enterprise customer, this model reduces total network security spending by 40-60% compared to separate transit + mitigation services. But the bigger savings come from reduced operational complexity:
- No mitigation activation delays
- No BGP re-advertisement during attacks
- No separate vendor relationships to manage
- No finger-pointing between transit and mitigation providers during incidents
How it works
When you onboard with Wirescope, all your traffic flows through our network from day one. We announce your IP space via BGP, scrub all inbound traffic at the edge, and deliver clean traffic to your infrastructure over our backbone or via direct cross-connect.
There's no "peace time" vs. "attack mode." The same infrastructure that delivers your transit also mitigates attacks. The same hardware that routes your packets also inspects them. It's one service, one bill, one vendor.
That's how network security should work.