One platform.
Pay only for what scans.
Every plan unlocks the full intelligence platform. Credits cover the work that costs us money — EdgeProtect scans, triage runs, brand monitoring, API requests.
Paid plans below add EdgeProtect scans, vulnerability triage, brand protection, and API access.
Basic
For solo operators and lean teams running periodic scans.
- ~1 typical EdgeProtect scan with credentials reveal
- API access — 60 requests/min
- All threat intelligence, CVE, and dashboard features
- Email alerts and weekly intelligence reports
- Single organisation, unlimited team members
Business
For security teams running regular scans across multiple targets.
- ~2–3 typical EdgeProtect scans per month
- API access — 60 requests/min
- Continuous brand-protection monitoring
- Vulnerability triage on demand
- Priority email support
Enterprise
For mature security programmes and MSSPs operating at scale.
- Cheapest per-credit rate across the platform
- API access — 60 requests/min
- Multi-domain brand protection
- CREST-accredited expert escalation
- Dedicated account manager and SLA
Credits reset to your plan quota each billing period — they don't roll over. Need more? Talk to sales for custom volumes.
Pay only for what you use
No seat licences. No surprise bills. Credits buy the active work that hits external targets — every other feature is unlocked from day one.
Vulnerability Triage
AI-driven enrichment, scoring, and remediation steps for a single CVE in your stack.
EdgeProtect Scan
External attack surface scan against a target domain.
- Base run200 credits
- Per host discovered10 credits
- Per port discovered1 credit
- Reveal exposed creds500 credits
Brand Protection
Continuous monitoring for typosquats, lookalikes, and impersonation domains.
API Access
Programmatic access via per-organisation API keys. Paid plans only.
- Standard read (CVE, EPSS, KEV, search)1 credit
- Enriched (threat intel, IOC, actor)2 credits
- AI / triage call25 credits
- Bulk export (per 1k rows)10 credits
What a typical month looks like
A few realistic profiles to help you size the right plan.
Solo / Lean ops
Best fit: Basic — 800 credits
A founder, IT lead, or small ops team running periodic checks against their external footprint.
- 1 EdgeProtect scan (no creds reveal)~444
- 1 vulnerability triage200
- ~150 standard API reads150
Active security team
Best fit: Business — 2,500 credits
A security function owning multiple assets, running scans regularly and monitoring at least one core brand.
- 1 brand-protection domain (30 days)750
- 1 EdgeProtect scan with creds reveal~944
Enterprise / MSSP
Best fit: Enterprise — 10,000 credits
Mature programmes and managed providers running multiple targets and feeding the API into their own tooling.
- 3 brand-protection domains (30 days)2,250
- 4 EdgeProtect scans with creds reveal~3,776
- 5 vulnerability triages1,000
- ~500 API reads & exports~600
Included with every plan
The full intelligence platform — no feature gates, no per-seat upcharges. Credits only apply to the four actions above.
Threat Intelligence
- Threat groups database (APTs, criminal, nation-state)
- Threat actor profiles with TTPs, targets, attribution
- Threat groups by industry and sector
- IOC database — IPs, domains, URLs, hashes
- Malware samples and detection metadata
- JA3 and SSL blacklists
- Weekly threat & vulnerability roundup
CVE & Vulnerability Data
- Full CVE database — search, filter, browse
- Individual CVE detail pages
- CISA Known Exploited Vulnerabilities (KEV)
- EPSS scoring, history, percentile, trending
- CWE browser
- CPE search — products, vendors, versions
- Recent CVEs (last 30 days)
Technology Tracking
- Auto-detect tech stack via website scan
- Manual technology selection
- Tracked technologies dashboard
- Vendor pages with vulnerability rollups
- Product pages with version-level CVE data
- Vulnerabilities by vendor / product / version
- Technology adoption statistics
Industries & Sectors
- Browse threats and CVEs by industry
- Sub-industry filtering
- Industry-specific threat actor mapping
Alerting & Notifications
- Custom alerts on CVEs, tech, threat intel
- Alert lists with edit/delete
- Frequency, severity, and delivery preferences
- Real-time notification panel
- Email alert delivery
Frameworks & Detection
- Full MITRE ATT&CK browser
- Interactive attack navigator
- Sigma rules database with community voting
- Atomic Red Team library with technique mapping
Dashboards & Analytics
- Personalised security dashboard
- Overview / Intelligence / Analytics / Tech / Industries tabs
- Vulnerability timeline
- CVSS radar charts
- EPSS distribution and history
- Statistics page with full metrics
Favourites & Search
- Star CVEs, threat groups, actors, tech, vendors, products
- Bulk favourite operations
- Quick-access tracked lists
- Global search with auto-complete
- Advanced product search
Account & Onboarding
- User profile and organisation management
- Team and member listing
- Two-factor authentication
- Light/dark theme
- Guided 4-step onboarding wizard
- AI-powered task recommendations
Developer API (paid plans)
- API keys scoped per organisation
- Hosted REST endpoints — fully documented
- Read endpoints — CVE, EPSS, KEV, vendor, product
- Threat intel — actors, groups, IOCs, sigma
- Bulk export endpoints with pagination
- AI triage and scoring callable from the API
- Per-tier rate limits with HTTP 429 / 402 handling
Pricing Questions
What happens when my credits run out?
Do unused credits roll over?
Can I top up mid-cycle?
What's the difference between annual and monthly billing?
Is there a free trial?
How does the credentials reveal fee work?
How does API access work?
Start for Free. Scale when you need to.
No credit-card-required trial of the intelligence platform. Add a paid plan only when you want to run scans, triage, monitoring, or API.