Is UniFi CyberSecure worth $99 a year? What you already get for free

Short answer: most homes don’t need it. Turn on UniFi’s free intrusion prevention, ad blocking and basic content filtering first. CyberSecure makes sense if you run a small business or home office on UniFi, need fine-grained web filtering (for kids, a school or compliance), or simply want the larger, professionally curated threat-signature set for $8.25 a month.

What it is (verified 2026-10-21)

UniFi CyberSecure is Ubiquiti’s optional subscription that upgrades two features on a UniFi gateway (Ubiquiti Help Center):

Intrusion detection and prevention (IDS/IPS) powered by Proofpoint. The help center describes “over 110,000” signatures on enterprise gateways, weekly updates with 30-50+ new signatures (Proofpoint plus Microsoft MAPP), curated sets to reduce false positives, and 53+ threat categories.
Enhanced content filtering powered by Cloudflare, with 100+ categories you can apply per network, VLAN or group.

Price: $99/year for CyberSecure, and $499/year for CyberSecure Enterprise on high-end gateways such as EFG and UXG-Enterprise (UniFi Network 9.0 announcement). Ubiquiti’s store lists CyberSecure as an add-on at $99.00, billed annually (UDM Pro store page). Each subscription covers one site’s gateway, including an HA shadow gateway. Since UniFi Network 11 (Oct 2026), the enhanced tier also includes daily signature updates with AI-assisted threat explanations (UniFi Network 11 post).

Requirements: a supported UniFi gateway on current firmware. Content filtering needs Network 9.3+. Remote Access must be enabled to activate it, and it isn’t available in some regions. The signature count depends on the model:

Gateway (examples)	CyberSecure signatures	Categories
EFG, UXG-Enterprise, EF Core	110,000+	53
UDM-Pro / SE / Pro-Max, UCG-Max / Ultra / Fiber, UXG-Pro / Max	70,000+ (30,000+ in Memory Optimized Mode)	53 (36)
UDM, UDR, UDR7, UX7	25,000+	13
UX, UXG-Lite	not supported	none

Source: Ubiquiti Help Center model table, checked 2026-10-21. Note the 2024 launch post quoted smaller numbers (55,000+ / 95,000+). Use the help center table as current.

What you already get without paying

Per Ubiquiti’s own docs:

IDS/IPS is built in. Settings → CyberSecure → Protection: turn on Intrusion Prevention and choose Notify (IDS) or Notify and Block (IPS). Auto mode blocks known-malicious IPs and Tor traffic by default (IDS/IPS help article). CyberSecure expands the signatures this engine uses. It doesn’t switch the engine on.
Ad blocking by DNS on Next-Gen and Cloud Gateways (Ad Blocking article).
Region blocking, firewall rules, VLANs, and basic content and domain filtering.

Realistic threats at home vs. small business

Scenario	Does CyberSecure meaningfully help?
Outdated laptop or IoT gadget talks to a known malware server	Somewhat. A larger signature set catches more known-bad traffic, and the free tier already blocks known-bad IPs
Phishing link in email	Little. That’s email and browser territory, plus filtering by category
Kids or guests on adult or gambling sites	Yes, if you need granular categories per VLAN
Exposed services (port forwards) being scanned	Some detection, but the real fix is not exposing them (use Tailscale or a VPN)
Unpatched router, NAS or Windows	No. Patching is the fix
Small office with compliance needs (e.g. CIPA-style filtering)	Yes, this is the target customer

Limitations to weigh

Signatures catch known patterns. Encrypted traffic limits what any IPS can inspect without TLS interception, which UniFi doesn’t do.
IPS uses memory and CPU. On smaller gateways it can reduce throughput or need Memory Optimized Mode. Check your model.
False positives happen, often with gaming and streaming traffic (Ubiquiti says so too). Expect to tune it.
It requires Remote Access (a cloud connection) for activation.

Alternatives

Free tier plus good habits: patching, VLANs for IoT, no port forwards
DNS filtering services such as NextDNS, Cloudflare for Families (1.1.1.3), or a self-hosted Pi-hole or AdGuard Home
A dedicated firewall (OPNsense or pfSense with Suricata), for people who enjoy tuning rule sets

Verdict

Typical home on UniFi: skip it, and keep the Network Application itself current (see our UniFi Network update tracker). Enable the free IPS (Notify and Block), ad blocking and region blocking, segment your IoT devices, and spend the $99 on backups.
Family that wants real per-device web filtering: worth it, mainly for the Cloudflare categories.
Home office handling client data, or a small business: worth it as one cheap layer, alongside patching, MFA and backups.
UX or UXG-Lite owners: not supported.

We haven’t run CyberSecure ourselves for this article. This comparison is based on Ubiquiti’s published documentation.