Plans that start at nothing.
A check costs nothing and needs no account. Paid plans add daily re-checks, alerts and a findings ledger. Every plan reports the same evidence under the same published rules.
Basic
$0
- 3 watched domainsA watched domain is one name you keep on the list. Its variations do not count towards the limit.
- Manual re-checks with change lists
- Last 40 reports keptOlder reports are removed as new ones arrive. Each domain keeps its most recent report.
- JSON and CSV export
- API: 10 checks per minute
No account needed to run a check.
Start with Basic
Pro
$49/ mo
- Everything in Basic
- 25 watched domains
- Daily re-checks, run for youCertificate logs are searched every 30 minutes as well, so a newly certificated lookalike reaches the report within the hour.
- Shodan surface searchHosts carrying your brand in a certificate name, hostname or page title, and hosts serving the same favicon as your domain, from Shodan's own records. The only site fetched is your own favicon.
- Email alerts on new or changed findingsYou set the lowest review priority worth an email, and whether to alert on new findings only.
- Webhook, Slack, Teams and Discord alertsA signed JSON webhook, or a Slack, Microsoft Teams or Discord incoming webhook, each with a test button and its last delivery recorded.
- Last 500 reports kept
- API: 60 checks per minute
- Standard support
No card needed for the trial.
Start a 14-day trial
Business
$99/ mo
- Everything in Pro
- 100 watched domains
- Organisation of up to 10 people, with admin and member roles
- Shared watchlist, reports, rules and alerts
- Audit log of who changed what, 500 events kept
- Priority support
No card needed for the trial.
Start a 14-day trial
Enterprise
Custom
- Everything in Business
- Custom limits and retention
- Takedown requests, 50 a month, sent by our teamTag a finding malicious and ask our team to report it to its registrar or hosting network. A person writes the report from the evidence in your report, sends it and records each step; we cannot promise the recipient acts.
- Managed threat intelligence
- SAML SSO and SCIM
- Priority support
Talk to us
What each plan includes
Limits are enforced rather than advisory, so a plan stops at its ceiling instead of billing past it. Enterprise limits are a starting point and are set per agreement.
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Watched domainsA watched domain is one name you keep on the list. The variations found under it do not count towards the limit. | 3 | 25 | 100 | 1,000 |
| Reports keptper accountOlder reports are removed as new ones arrive, and each watched domain always keeps its most recent report. | 40 | 500 | 2,000 | 10,000 |
| Daily re-checksrun for youCertificate logs are also searched every 30 minutes for domains on daily re-checks. | Not included | Included | Included | Included |
| Email alertsYou set the lowest review priority worth an email, and whether only new findings raise one. | Not included | Included | Included | Included |
| Webhook, Slack, Teams and Discord alerts | Not included | Included | Included | Included |
| API rate limitper key | 10 / min | 60 / min | 120 / min | 600 / min |
Features
Everything the product does today, and which plan it belongs to. A capability appears here only if it is built: nothing on this page is a roadmap item.
Checking
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Public checkerno accountAnyone can run a check from the site without signing in. The finished report is kept for 24 hours. | Included | Included | Included | Included |
| Candidate generationabout 20 pattern families | Included | Included | Included | Included |
| Certificate transparency search | Included | Included | Included | Included |
| Ad-hoc checks saved to reports | Included | Included | Included | Included |
| Direct lookup of one exact domain | Included | Included | Included | Included |
| Discovercandidates with no DNS answer | Included | Included | Included | Included |
Watching
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Watched domains | 3 | 25 | 100 | 1,000 |
| Manual re-checks with change lists | Included | Included | Included | Included |
| Daily re-checks | Not included | Included | Included | Included |
| Shodan surface search and favicon clones | Not included | Included | Included | Included |
| Certificate log watchevery 30 minutesRuns for domains on daily re-checks. A name seen for the first time queues a re-check within the hour. | Not included | Included | Included | Included |
| Reports kept | 40 | 500 | 2,000 | 10,000 |
Reviewing
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Findings ledgerOwned, malicious, false positive or ignored, with the dates each finding was first and last seen. | Included | Included | Included | Included |
| Inbox of new findings | Included | Included | Included | Included |
| Explore queries and saved views | Included | Included | Included | Included |
| Summary reportsHTML and PDF | Included | Included | Included | Included |
| Shared watchlist and reports | Not included | Not included | Included | Included |
| Organisation members and roles | Not included | Not included | Included | Included |
Acting
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Alert rules with severity | Included | Included | Included | Included |
| Email alerts | Not included | Included | Included | Included |
| Webhook, Slack, Teams and Discord alerts | Not included | Included | Included | Included |
| JSON, JSONL and CSV export | Included | Included | Included | Included |
| API rate limit | 10 / min | 60 / min | 120 / min | 600 / min |
| Audit log | Not included | Not included | Included | Included |
Company and response
| Item | Basic | Pro | Business | Enterprise |
|---|---|---|---|---|
| Takedown requests a monthA person on our team sends the report from the evidence in your report and records each step. Nothing is sent automatically. | Not included | Not included | Not included | 50 |
| Managed threat intelligence | Not included | Not included | Not included | Included |
| SAML SSO and SCIM | Not included | Not included | Not included | Included |
| Custom limits and retention | Not included | Not included | Not included | Included |
| Support | Community | Standard | Priority | Priority |
What counts against a limit
Limits are counted per account and enforced rather than billed past. Knowing what does not count matters as much as what does.
| Item | Counts? |
|---|---|
| A domain on your watchlist | Yes, one of your watched domains |
| Variations found under a watched domain | No, never counted |
| A manual re-check | No, only the saved report counts |
| A daily re-check run for you | No, only the saved report counts |
| A saved report | Yes, against the reports kept limit |
| An ad-hoc check from Tools | Yes, it saves a report |
| A public check from the site | No, it is not attached to an account |
| An API call | Against the per-minute rate, not a quota |
Billing and trials
Paid plans are billed in advance by Stripe. Card details are entered on Stripe's pages and never reach this site, which stores only the customer and subscription identifiers.
| Item | How it works |
|---|---|
| Pro trial | 14 days, no card required |
| What happens when a trial ends | The account returns to Basic limits |
| Billing period | Monthly or annually, in advance |
| Tax | Prices exclude any applicable tax |
| Cancelling | From Settings, effective at period end |
| Refunds | Through the contact page |
| Invoices and payment methods | Stripe billing portal, from Settings |
What no plan changes
Some things are the same on every plan, including the one that costs nothing. They are the parts of the product that are not a commercial lever.
| Item | On every plan |
|---|---|
| The rules behind every review priority | Published on the methodology page |
| The public sources a check reads | RDAP, DNS, certificate logs, passive records |
| Whether a suspect site is visited | Never, on any plan |
| Unavailable lookups | Reported as unknown, never as a negative |
| Export and deletion | Full JSON export and immediate deletion |
| Similarity as evidence of intent | Never claimed, on any plan |
FAQ
Frequently asked questions
Nothing, and no account is needed. You can check any domain from the site: the engine generates thousands of candidate names, resolves them, and reports the ones that are registered with the records behind each. Paid plans add a watchlist, daily re-checks and alerts.
One name you keep on the list. The variations found under it never count towards the limit, however many there are, so watching a brand with two hundred lookalikes still uses one of your slots.
It runs the same check you would run by hand, saves the report, and computes what changed since the previous one for that domain: what is new, what changed priority, what changed evidence and what is gone. Domains on daily re-checks also have certificate logs searched every 30 minutes, so a newly certificated lookalike reaches the report within the hour rather than at the next daily run.
The trial lasts 14 days and needs no card. If you have not added a payment method, the account returns to Basic limits when it ends. Nothing is deleted at that moment, but reports beyond the Basic limit are removed as new ones arrive.
The plan stops at its ceiling rather than billing past it. Reports beyond the kept-reports limit are removed oldest first, and each watched domain always keeps its most recent report. There is no usage-based charge on any plan, so a check can never produce an unexpected bill.
Paid plans are billed in advance by Stripe, monthly or annually, at the prices shown above and exclusive of any applicable tax. Card details are entered on Stripe's pages and never reach this site, which stores only the Stripe customer and subscription identifiers. Invoices and payment methods are managed through Stripe's billing portal from Settings.
You can cancel at any time from Settings. Cancelling takes effect at the end of the period you have already paid for, and the account then returns to Basic limits. Refund requests go through the contact page.
An organisation: up to 10 people signing in as themselves to one shared watchlist, reports, rules and alerts, with admin and member roles, and an activity log that names who changed what. Billing stays with the owner. It carries the same 14-day trial as Pro.
The evidence and the rules. Every plan reads the same public sources, applies the same published review-priority rules, reports an unavailable lookup as unknown rather than as a negative, and never loads a suspect website to read what is on it. Paying changes how often a check runs and what the panel remembers, not what a finding means.
Questions about a plan? Use the contact page.
Prices are in USD and exclude any applicable tax. Paid plans are billed in advance by Stripe, monthly or annually. Card details are entered on Stripe’s pages and never reach this site.
Subscriptions renew until cancelled from Settings; cancelling takes effect at the end of the period already paid for, and the account returns to Basic limits. Read the terms.