Getting started
What runs automatically, and what you press
The line between Free and paid: how many domains are watched, what watched means on each plan, and what happens over the allowance.
Updated · 3 min read
Every plan holds unlimited domains and can scan any of them on demand. What a plan buys is how many domains are watched without being asked, and the two modules Free leaves out (DMARC report intake and SEO crawls).
Watched domains by plan
| Free | Starter | Pro | Enterprise | |
|---|---|---|---|---|
| Domains you can hold | Unlimited | Unlimited | Unlimited | Unlimited |
| Watched automatically | 3 | 25 | 100 | Unlimited |
| What watched means | Five-minute uptime probe only; every other check runs when you press scan | Nightly re-scan of everything, plus the probe | Same, daily | Hourly, at the front of the queue |
"Watched" on a paid plan means the daily domain scan (DNS, registration, certificate, email records, security checkup, single-page SEO), the uptime probe, change detection, and, where the domain has opted in, the scheduled exposure scan.
Cadence settings
Under Settings, scan frequency can be daily, every three days, weekly, or (Enterprise only) hourly. Per domain, Scan settings lets you turn scanning off for one domain, choose Basic (the domain scan alone) or Standard (plus the security checkup, mail monitoring, SEO and the website review), and switch between automatic and run-it-yourself.
Over the allowance
A domain past the plan's automated allowance is not switched off and is not read-only. It stays in the account, scans whenever you ask, and accepts edits. The oldest domains on the account keep the automation. The domain's header reads "on demand" instead of "watched daily".
What is automatic on every plan
- Breach re-checks for the one address Free may watch (five on Starter, ten on Pro, fifty on Enterprise). A breach is the one risk you cannot discover by looking, so re-checks run on a schedule even on Free.
- KEV and CVE alerts. The vulnerability feeds are matched against every account's observed software regardless of plan. On Free the inventory only advances when you run a scan by hand: the alerting is automatic, the observing is not.
- Change detection on domains that are scanned, and the "Did you make this change?" question that follows.
What paying adds
| Capability | Starter | Pro | Enterprise |
|---|---|---|---|
| Email alerts and the weekly summary | Yes | Yes | Yes |
| DMARC report intake | Yes | Yes | Yes |
| SEO and accessibility crawl | 25 pages | Full site | Full site |
| Lookalike watch (nightly re-check and alert) | Yes | Yes | Yes |
| Scheduled exposure scans | Yes | Yes | Yes |
| Local SEO suite | No | 250 credits a month | 1,900 a month |
| API and MCP | No | Read | Read and write |
| Priority and hourly scanning | No | No | Yes |
| Ask NHM (a person on a thread) | No | No | Yes |
Manual scan allowances
Even on demand, scans are metered so one account cannot spend the day's scanner budget:
| Category | Free | Starter | Pro | Enterprise |
|---|---|---|---|---|
| Website scans (domain scan, checkup, SEO) | 6 per day | 25 per day | 50 per day | 200 per day |
| Vulnerability scans | 1 per 7 days | 5 per day | 10 per day | 50 per day |
| AI keyword refreshes | 1 per 7 days | 5 per day | 10 per day | 50 per day |
| Dark web scans | 1 per day | 5 per day | 10 per day | 50 per day |
A refused scan returns the reset time, and the app shows the server's own message rather than a guess.
Keep reading
Related articles
- A domain says "on demand" or "past your plan limit"What happens to a domain over the plan's automated allowance: it stays, it scans when you ask, it accepts edits, and the oldest domains keep the automation.Troubleshooting ·Updated
- Check any domain for freeThe Check tab, the signed-out welcome check, the App Clip, and the public tools on nhmohio.com. What each runs and what needs an account.Getting started ·Updated
- The lookalike checkHow variations are generated and ranked, how many are checked on each plan, what is read about each registered one, and why the result states its coverage.Impostor domains ·Updated