Pricing & Credits
ThreatMap uses a credit-based system. 1 credit = $0.01. Most calls cost 1 credit. Failed calls cost 0 credits. Top-up credits never expire.
Free tier: 5,000 credits at sign-up + 1,000/month forever. No credit card. Stay free as long as you want.
Three tiers
| Tier | Price | Credits | Who |
|---|---|---|---|
| Free | $0 | 1,000/mo + 5K sign-up | Solo devs, OSS, researchers |
| Teams | $999/mo | 10K per user (100K total) | 2-10 person SOCs, startups |
| Enterprise | $50K+/yr | Unlimited pooled | MSSPs, enterprise, government |
Credit costs per endpoint
| Endpoint | Credit cost |
|---|---|
POST /v1/ioc (per value) | 1 credit |
POST /v1/cve (per CVE) | 1 credit |
/v1/dns, /v1/certificates, /v1/whois, /v1/trackers, /v1/host-pairs | 1 / query |
POST /v1/feed, /v1/actor, /v1/graph (per hop) | 1 |
GET /v1/rules, POST /v1/convert, GET /v1/profiles | 1 |
POST /v1/detect (per 1K events) | 5 |
POST /v1/scan (per /24) | 5 |
POST /v1/detonate | 25 |
Commercial-feed call (or 0 with BYOK) | 2 |
Top-up packs
Volume bonuses apply automatically. Top-up credits never expire.
| Amount | Credits | Bonus |
|---|---|---|
| $25 | 2,500 | — |
| $100 | 11,000 | +10% |
| $500 | 57,500 | +15% |
| $1,000 | 120,000 | +20% |
Autopay available — set a trigger threshold and recharge amount. Volume bonuses apply to every autopay charge.
Usage benchmarks
How many credits do you actually need? Real-world examples:
| Workload | Credits / month | Fits in |
|---|---|---|
| Discord bot enriching pasted IOCs | ~2,000/mo | Free |
| CI/CD scanning every commit against KEV + EPSS | ~5,000/mo | Free + top-ups |
| Phishing pipeline (50 emails/day) | ~10,000/mo | Teams |
| 5-person SOC triaging 200 alerts/day | ~30,000/mo | Teams (100K included) |
| 10-person SOC with EASM + daily hunting | ~80,000/mo | Teams (100K included) |
BYOK (Bring Your Own Key)
If you already have a Shodan, VirusTotal, Censys, or GreyNoise license, plug your key into ThreatMap. Calls routed through your key cost 0 credits.
# Register your Shodan key curl https://api.threatmap.io/v1/account/byok \ -H "Authorization: Bearer $THREATMAP_API_KEY" \ -d provider="shodan" \ -d api_key="SHODAN-KEY-..."
What happens if I run out of credits?
- Free: Wait for the 1st of the month, or top up at $0.01/credit.
- Teams: Overage at $0.0085/credit (15% off). No service interruption.
- Enterprise: Unlimited — no credit counting.
Billing FAQ
Do failed calls cost credits?
No. Only 2xx responses count. 4xx, 5xx, and 429 (rate limited) are free on every tier.
Do credits expire?
Top-up credits never expire. The 1,000 monthly free credits reset on the 1st — unused credits don't carry over.
Can I get a refund?
Unused top-up credits are refundable within 30 days. Monthly subscription fees (Teams) are non-refundable but cancelable anytime.
Startups, NGOs, OSS?
Get Teams free for one year — apply via the in-app form.
How does Enterprise pricing work?
Base platform starts at $50K/year (unlimited credits, multi-tenant, standard connectors, SSO). Premium feed bundles, on-prem deployment, and FedRAMP-track compliance add to the base. Typical contracts: $50K–$150K/year. Contact sales.