Plans & Tiers
Three tiers. No add-on maze. Free is a real product, not a trial. Upgrade only when you outgrow solo use.
Quick comparison: Free ($0, 1K credits/mo) → Teams ($999/mo, 10 users, dashboard, AI, BYOK) → Enterprise ($50K+/yr, unlimited, multi-tenant, on-prem).
Credits & pricing
| Feature | Free | Teams | Enterprise |
|---|
| Monthly credits | 1,000 | 10K / user (100K total) | Unlimited pooled |
| Sign-up bonus | 5,000 one-time | — | — |
| Credit cost | $0.01 / credit | $0.01 / credit | Included |
| Overage rate | $0.01 / credit | $0.0085 / credit | N/A |
| Failed calls | Free (0 credits) | Free | Free |
| Top-up credits expire | Never | Never | N/A |
API & endpoints
| Feature | Free | Teams | Enterprise |
|---|
| All endpoints | Yes — nothing locked | Yes | Yes |
| Rate limit | 5 req/sec | 50 req/sec / user | 1,000 req/sec |
| API keys | 1 | 10 | Unlimited |
| Batch lookups (100/call) | Yes | Yes | Yes |
| Pivot history depth | 30 days | 1 year | Unlimited |
| File detonation size | 5 MB | 100 MB | 10 GB |
Sources & BYOK
| Feature | Free | Teams | Enterprise |
|---|
| OSS feeds (15+) | Included | Included | Included |
| Commercial feeds (bundled) | 2 credits / call | Bundled (0 credits) | All premium bundled |
| BYOK (bring your own key) | Yes — 0 credits | Yes — 0 credits | Yes — 0 credits |
| Premium feeds (Censys Ent, VT Ent, RF) | — | — | Bundled or BYOK |
MCP & AI
| Feature | Free | Teams | Enterprise |
|---|
| MCP server | Public read-only | Authed (all tools) | Per-team + per-tool ACLs |
| AI Threat Hunter | — | Yes | Yes |
| LLM Alert Triage | 10 / day | Unlimited | Unlimited |
| Auto-Remediation Playbooks | — | Yes | Yes |
| AI-Generated Detection Rules | — | Yes | Yes |
| Daily Threat Briefing | Weekly, generic | Daily, tailored | Daily + CISO view |
| Predictive Exposure Scoring | — | Yes | Yes |
Collaboration & monitoring
| Feature | Free | Teams | Enterprise |
|---|
| Personal projects | 3 | Unlimited | Unlimited |
| Shared projects | — | Unlimited | Unlimited |
| Community-published projects | — | Yes | Yes |
| Active monitors | 3 | 25 | Unlimited |
| Monitor channels | Email only | Email + Slack + Teams + Webhook | All + SOAR |
| Min check interval | 24 hours | 1 hour | 1 minute |
| Private rule repos with CI | — | Yes | Yes |
EASM & posture
| Feature | Free | Teams | Enterprise |
|---|
| On-demand scan | Yes (5 cr /24) | Yes | Yes |
| Continuous EASM agents | — | Up to 20 assets | Up to 200 assets |
| Posture checks (DNS, TLS, exposed) | Beta | Beta | Yes |
| Intel watches (phishing, leak, supply) | — | Beta | Yes |
Governance & deployment
| Feature | Free | Teams | Enterprise |
|---|
| Users | 1 | 10 (+$99/user after) | Unlimited |
| Dashboard | — | Yes (10 users) | Multi-tenant (unlimited) |
| SSO / SAML / SCIM | — | — | Yes |
| RBAC | — | Basic | Full + per-tool ACLs |
| Audit logs | — | — | Immutable + evidence packs |
| Deployment | Shared cloud | Shared cloud | Cloud / single-tenant / on-prem / air-gapped |
| SLA | Best-effort | 99.5% uptime | 99.99% uptime, 1h SLA |
| Support | Community | Email, 24h response | 24x7 named TAM |
Upgrading & downgrading
- Free → Teams: Instant. Your credits upgrade to 10K/user immediately. Existing projects and monitors carry over.
- Teams → Enterprise: Contact sales. We migrate your team to an org with multi-tenant support. No data loss.
- Downgrade: Cancel Teams anytime — your account reverts to Free at the end of the billing cycle. Projects and monitors above Free limits are archived (not deleted) for 30 days.
Enterprise add-ons
Enterprise base starts at $50K/year. These add to the base:
| Add-on | Typical addition |
|---|
| Premium feed bundle (Censys Ent, VT Ent, GreyNoise Ent) | +$20-40K/yr |
| Recorded Future / Mandiant research feeds | +$30-50K/yr (pending legal) |
| On-prem / air-gapped deployment | +$15-30K/yr |
| FedRAMP-track compliance | +$20K/yr |
Typical contracts: $50K-$150K/year. Most enterprise SOCs land at $70-90K: base + one premium feed bundle. Contact sales.