Pricing for threat intelligence and dark web monitoring

The 14-day free trial includes access to monitor keywords and threat actors, plus a Personalized Threat Profile to match actors to your organization's footprint. The trial also includes a one-time breach and infostealer check on your own domain. It runs once, with passwords masked. Growth shows those passwords and starts continuous domain monitoring.

Yes, you can upgrade or downgrade your plan at any time. When upgrading, you'll be charged the prorated amount for the remainder of your billing cycle.

Each plan includes keywords and threat actor watchlists. Domain coverage is a one-time snapshot on Starter, then continuous monitoring for 1 domain on Growth, 3 on Pro, and 10 on Enterprise.

You can purchase domain add-ons starting from the Growth plan. Add-ons are billed monthly and can be added or removed at any time.

Yes, we offer special pricing for non-profit organizations and educational institutions. Contact our sales team to learn more.

You'll be billed at the start of each billing cycle (monthly or yearly). Payments are processed securely through our payment provider.

Enterprise starts at $499/month with 10 monitored domains included. Additional domain packs are available as add-ons. Pricing for custom keyword volumes or dedicated support tiers is available on request — reach out and we'll turn around a quote within 1 business day.

Executive Threat Monitoring watches named executives and their families for leaked credentials and dark web threats. It is included with the Enterprise plan. Learn more

DarkWebSonar monitors dark web forums and Telegram channels for chatter around DDoS campaigns and website defacements. We continuously crawl these sources and alert you when attacks are discussed or when your organization is mentioned in relation to ongoing or planned campaigns.

We track ransomware leak sites and victim announcements in near real time. DarkWebSonar detects when your organization appears on ransomware blogs, captures pre-extortion warnings, and monitors for early signs of imminent attacks or data dumps so you can respond before public disclosure. Learn more

We scan underground forums, paste sites, and marketplaces for ads offering network access or stolen data, and for new breach or leak postings. DarkWebSonar also offers email and domain breach credential monitoring, stealer-log scanning for malware-harvested credentials, and lookalike domain monitoring so you can find compromised credentials and brand impersonation before attackers exploit them.