Pricing
Start free, pay for volume and feeds
50 free reputation checks a month. STIX/TAXII feeds start with Pro at €99/month.
Free
- Reputation checks/month
- 50
- Scans/month (prompt injection and email)
- 1,000
STIX/TAXII requires Pro or Enterprise
Pro
- Reputation checks/month
- 10,000
- Scans/month (prompt injection and email)
- 250,000
STIX/TAXII included
Enterprise
- Reputation checks/month
- 1,000,000
- Scans/month (prompt injection and email)
- 1,000,000
STIX/TAXII included
On Pro and Enterprise, feed polling does not use your monthly checks.
MonthlyAnnual (Save 17%)
Free
€0forever
For individuals and small projects.
- 50 reputation checks/month
- 60 checks/minute burst limit
- Monitor up to 5 domains or IPs
- Threat reports
- API access (rate-limited)
- 1,000 scans/month (prompt injection and email)
ProMost Popular
€99/month
Live STIX/TAXII feeds for MISP, OpenCTI and your SIEM, plus 10,000 API checks/month.
- STIX/TAXII feeds — polling is outside your monthly checks
- 10,000 reputation checks/month
- 60 checks/minute burst limit
- Monitor up to 100 domains or IPs
- Real-time email notifications
- Detailed threat reports
- Advanced API & bulk (up to 100/request)
- Up to 10 webhooks
- Priority support
- 250,000 scans/month (prompt injection and email)
Enterprise
Contact us
Higher volumes, and help connecting the data to your tools.
- STIX/TAXII feeds — no page limit, polling outside your monthly checks
- 1,000,000 IP/domain checks/month, 5,000 requests/minute burst limit
- Monitor up to 10,000 domains and IPs
- Custom notification systems
- Advanced threat intelligence
- Onboarding help wiring the feed into your tools
- Custom API rate limits
- On-premise deployment on request
- Dedicated support
- 1,000,000 scans/month (prompt injection and email)
No credit card required · 50 free checks/month · Free API key · Cancel anytime
Need a custom plan?
Enterprise adds a named support contact with response times agreed per contract, custom integrations, white-label options and a dedicated deployment on request. Example: OpenCTI feeds for a 600,000-IP firewall.
- Volumes tailored to your usage
- Availability terms by contract
- On-premise on request
Plans
Compare plans
Free
- Monthly reputation checks
- 50
- Monthly scans (prompt injection and email)
- 1,000
- API burst limit
- 60/min
- Monitored domains / IPs
- Up to 5
- Advanced API access
- Not included
- Detailed threat reports
- Not included
- Webhooks
- Not included
- Custom API rate limits
- Not included
- On-premise deployment (on request)
- Not included
- STIX/TAXII feeds
- Not included
- Feed polling
- —
- Feed page size
- —
- MMDB download
- Not included
- SIEM connectors
- Not included
- OIDC SSO
- Not included
- Real-time notifications
- Limited
- Support
Pro
- Monthly reputation checks
- 10,000
- Monthly scans (prompt injection and email)
- 250,000
- API burst limit
- 60/min
- Monitored domains / IPs
- Up to 100
- Advanced API access
- Included
- Detailed threat reports
- Included
- Webhooks
- 10
- Custom API rate limits
- Not included
- On-premise deployment (on request)
- Not included
- STIX/TAXII feeds
- Included
- Feed polling
- Outside monthly checks
- Feed page size
- Standard
- MMDB download
- On request
- SIEM connectors
- Included
- OIDC SSO
- Not included
- Real-time notifications
- Included
- Support
- Priority
Enterprise
- Monthly reputation checks
- 1,000,000
- Monthly scans (prompt injection and email)
- 1,000,000
- API burst limit
- 5,000/min
- Monitored domains / IPs
- Up to 10,000
- Advanced API access
- Included
- Detailed threat reports
- Included
- Webhooks
- 10
- Custom API rate limits
- Included
- On-premise deployment (on request)
- Included
- STIX/TAXII feeds
- Included
- Feed polling
- Outside monthly checks
- Feed page size
- No plan page cap
- MMDB download
- On request
- SIEM connectors
- Included
- OIDC SSO
- Included
- Real-time notifications
- Included
- Support
- Dedicated
Pricing FAQ
Frequently Asked Questions
What counts as an API request?
Reputation lookups use the monthly check quota. Bulk lookups count each item in the batch: 100 domains use 100 checks. On Pro and Enterprise, STIX/TAXII polling is outside that quota. Prompt-injection and email scans have a separate monthly allowance: an email counts as one scan, whatever its links and attachments; a prompt-injection scan counts one, plus one per additional indicator it checks.
Can I upgrade or downgrade my plan?
Yes, you can change your plan at any time. Upgrades take effect immediately, and downgrades take effect at the next billing cycle.
Do you offer a free trial?
Free has no time limit. Paid plans are billed at checkout; cancel anytime. When a Free organization reaches its saved-report limit, its owner or an admin can start a 7-day Pro trial, once per organization. Checkout requires a card.
What payment methods do you accept?
We accept all major credit cards. A company that pays on invoice can have Pro billed monthly by Stripe invoice, paid by bank transfer or card within 30 days, purchase order accepted; Enterprise is invoiced on a quote. Request a quote and we send the invoice and terms. Request a quote
Is there a discount for annual billing?
Yes, annual plans receive a 17% discount compared to monthly billing.
What happens if I exceed my request limit?
Once the monthly quota is used up, further requests return HTTP 429 and nothing extra is billed. Upgrade, or wait for the quota to reset at the start of next month.
Do STIX/TAXII feed polls use up my monthly checks?
No. On Pro and Enterprise, TAXII polling is exempt from the monthly check quota, so a connector can stay in sync without using your lookups. Per-minute burst limits still apply. On other plans the TAXII endpoints answer 403, and a refused call does not count against your checks.
How does the STIX/TAXII feed differ on Enterprise?
The collections are the same. An Enterprise key has no page limit: responses stay paginated by size, with a next token until the collection is complete. Enterprise also has a higher burst limit and help connecting OpenCTI, MISP, Microsoft Sentinel or your own client.
Start with the free plan
50 checks a month and an API key, no credit card.