Plans and billing

Plans compared

Every entitlement per plan: watched domains, cadence, alerts, DMARC reports, crawl depth, Local SEO credits, lookalike watch, exposure scans, API, Ask.

Updated · 3 min read

The numbers below are the entitlements the server enforces, read from the same file the dashboard and the app read. A refused paid endpoint answers 402 plan_upgrade_required and names the required_plan.

The table

Free Starter Pro Enterprise
Price (monthly / yearly) $0 $6.99 / $69.99 $49.99 / $499.99 $99.99 / $999.99
Domains you can hold Unlimited Unlimited Unlimited Unlimited
Watched automatically 3 25 100 Unlimited
What watched means Five-minute uptime probe only; no nightly scan Nightly scan plus the probe Nightly scan plus the probe Nightly scan plus the probe; hourly available, first in the scheduled sweep order
Scan cadence options n/a Daily, every 3 days, weekly Daily, every 3 days, weekly Plus hourly (daily by default; switch in Settings on the web dashboard)
Alerts in the feed and pushed to the app: uptime, provider status, breach hits, KEV and CVE Yes Yes Yes Yes
Alerts from the nightly re-scan: change events, renewal, certificate, DNS records, security score No Yes Yes Yes
DMARC and lookalike alerts No Yes Yes Yes
DMARC report intake, diagnostics, managed records No Yes Yes Yes
SEO and accessibility crawl No (homepage checks still run) 25 pages 300 pages with Crawl every page; 5,000 with the app's deep crawl Same as Pro
Automatic on-page SEO scan No Weekly Daily Daily
Automatic SEO report email No No Yes Yes
Local SEO suite No No Yes, 250 credits a month Yes, 1,900 a month
Credits granted 100 once 0 250 / month 1,900 / month
Lookalike check 150 candidates 250 750 2,000
Lookalike watch and alerts No Weekly Daily Daily
Scheduled exposure scans No (one manual scan every 7 days) Yes, 5 manual a day Yes, 10 a day Yes, 50 a day
Website scans on demand 6 a day 25 a day 50 a day 200 a day
Breach-monitored addresses (daily or weekly re-check) 1 5 10 50
Dark web manual checks 1 a day 5 a day 10 a day 50 a day
API keys and MCP No No Read Read and write
White-label report branding No No No Yes
Scanner issue reports and finding verdicts over MCP No No Yes, 30 reports a day Yes, 30 reports a day
Ask NHM (a person, on a thread) Explanations on every plan The thread
Ads in the app Yes No No No

Three rules that hold across the table

  1. Over the automated allowance is not read-only. Those domains stay in the account, scan on demand, and accept edits; the oldest keep the automation.
  2. KEV and CVE alerts are not plan-gated. They match every account's observed software. On Free the inventory only advances when you scan by hand.
  3. Every plan is told what is wrong and how to fix it. What Enterprise buys with Ask NHM is a person doing it with you.

Admin grants

An operator can grant an individual account the SEO and Local SEO capabilities, or change which plans get automation, without changing the plan itself. If your account has something the table says it should not, that is why.

Where to see your own numbers

  • iOS: Account, the plan card ("n of m watched · daily scans · renews <date>").
  • Web: Settings, Plan & credits; GET /api/auth/me returns the plan and ad-free state; GET /api/seo-results/policy returns the SEO allowances.

Still stuck?

Ask the people who run the scanner.

Send the domain and what you expected to see. We look at the same scan you are looking at and write back with what it means and what to change.