Free
Hands-on evaluation, no credit card.
$0
Free forever
IOC Enrich
1,000 / month
Rate-limited to 1 RPS
No credit card. Monthly quota resets on the 1st (UTC).
Pricing
Per-call pricing. Zero surprises.
Per-call pricing on one transparent counter: 1 call = 1 IOC enriched, and quota never hard-stops you. Free tier, no credit card. Use it as long as you need; upgrade to Professional when you outgrow it.
Plans
Pick a tier; switch when you scale.
All tiers share the same API surface and signal taxonomy. Tiers differ only in counters, SLA, and support; no feature gating.
Transparent pricing, sign up online.
Starter
Solo analyst or small team; paid entry without sales.
$99/mo
billed monthly
IOC Enrich
7,500 / month
$50 per 1k overage
Monthly subscription. Cancel anytime. Upgrade to Professional when you outgrow it.
Professional
Daily SOC operations: bulk replay + audit trail.
$499/mo
billed monthly
IOC Enrich
15,000 / month
$40 per 1k overage
Monthly subscription. Cancel anytime. The Free tier is always available; no time-limited trial.
How counters work
Three rules, all in plain sight.
1 call = 1 IOC enriched
Bulk endpoint counts each IOC inside the batch (bulk of 500 = 500 calls). No bulk discount.
Soft cap, never hard-stop
API keeps serving past quota; overage billed per 1k. Dashboard alerts at 80% and 100%.
Estimate your bill
Move the sliders, see your tier.
Pick a method, enter your inputs, and watch the recommended tier, base price, overage projection, and total update in real time.
Your estimate
Professional
Base price$499/mo
Overage projection+$0
Total$499/mo
Estimates only · actual contract may differ · USD, excl. VAT.
These figures are approximate. Actual IOC volume depends on alert rates, automation level, and your team's workflow; real usage can differ materially. Use this as a sizing hint, not a quote.
Built for MSSP / MDR
Multi-tenant scoring, standardized decision language.
An MSSP's biggest operational risk is inconsistency. Same IOC, same verdict across customers via deterministic core; explainable Q&A drops analyst onboarding cost; per-tenant logs for audit.
Learning curve drops
Signal → evidence → Q&A arrives ready; analysts learn to apply decisions, not 'read the data'.
Decision standardized
Same input → same verdict, system-bound not person-bound. Tenant A and Tenant B share the same 'high risk' threshold.
Audit-ready by default
Master key + X-Customer-Id + per-tenant log + per-tenant report; MSSP can show customers the evidence chain directly.
5+ MSSP partners onboarding · 100k+ enrichments/day infrastructure ready · 99.95% multi-tenant SLA target
Frequently asked
Counter mechanics + objection handling.
What counts as one IOC enrich call?
1 IOC sent to POST /enrich = 1 call. Bulk endpoint counts each IOC inside the batch (bulk of 500 = 500 calls). Same rate as single call; no bulk discount.
What happens when I exceed my quota?
Soft cap on paid tiers: API keeps serving, overage billed per 1k. Dashboard alerts at 80% and 100% so you can upgrade or throttle. Free tier has a hard monthly cap (resets on the 1st, UTC).
Do duplicate queries cost me twice?
Yes on the API: every call is server-side recomputed. Client SDK has session-cache, but each request that hits our server counts.
Why per-IOC, not per-seat?
Per-seat punishes scale. SOC analysts run thousands of queries; per-IOC ties cost to actual usage. Predictable: more enrichments = more value, billed proportionally.
Monthly vs Annual savings?
Annual prepay saves ~20% across paid tiers. Free tier has no annual option (it's free, perpetually). Monthly = no commitment.
Can I upgrade or downgrade mid-cycle?
Yes. Upgrade is prorated; you start using new quota immediately. Downgrade applies at next billing cycle. Free tier stays available even if you cancel a paid subscription.
Final pricing is set in your contract. USD, excludes VAT. Volume and annual discounts negotiable. Last reviewed: 2026-04-29.
First verdict in 5 minutes.
Get an API key, send your first IOC, plug the response into SOAR/SIEM. The free monthly quota requires no credit card.
Talk to sales for custom volume