Plans and billing
Plans compared
Every entitlement per plan: watched domains, cadence, email alerts, DMARC reports, crawl depth, Local SEO credits, lookalike watch, exposure scans, API, Ask.
Updated · 2 min read
The numbers below are the entitlements the server enforces, read from the same file the dashboard and the app read. A refused paid endpoint answers 402 plan_upgrade_required and names the required_plan.
The table
| Free | Starter | Pro | Enterprise | |
|---|---|---|---|---|
| Price (monthly / yearly) | $0 | $6.99 / $69.99 | $49.99 / $499.99 | $99.99 / $999.99 |
| Domains you can hold | Unlimited | Unlimited | Unlimited | Unlimited |
| Watched automatically | 3 | 25 | 100 | Unlimited |
| What watched means | Five-minute uptime probe; other checks on demand | Nightly scan plus the probe | Nightly scan plus the probe | Hourly scan available, priority queue |
| Scan cadence options | n/a | Daily, every 3 days, weekly | Daily, every 3 days, weekly | Plus hourly |
| Email alerts and weekly summary | No (push only) | Yes | Yes | Yes |
| DMARC report intake, diagnostics, managed records | No | Yes | Yes | Yes |
| SEO and accessibility crawl | No (homepage checks still run) | 25 pages | Full site (5,000 pages) | Full site |
| Monthly automatic SEO scan and report | No | No | Yes | Yes |
| Local SEO suite | No | No | Yes, 250 credits a month | Yes, 1,900 a month |
| Credits granted | 100 once | 0 | 250 / month | 1,900 / month |
| Lookalike check | 150 candidates | 250 | 750 | 2,000 |
| Lookalike watch and alerts | No | Weekly | Daily | Daily |
| Scheduled exposure scans | No (one manual scan every 7 days) | Yes, 5 manual a day | Yes, 10 a day | Yes, 50 a day |
| Website scans on demand | 6 a day | 25 a day | 50 a day | 200 a day |
| Breach-monitored addresses | 1 | 5 | 10 | 50 |
| Dark web manual checks | 1 a day | 5 a day | 10 a day | 50 a day |
| Custom endpoint one-off probe | No | Yes | Yes | Yes |
| API keys and MCP | No | No | Read | Read and write |
| White-label report branding | No | No | No | Yes |
| Scanner issue reports over MCP | No | No | No | Yes, 30 a day |
| Ask NHM (a person, on a thread) | Explanations on every plan | The thread | ||
| Ads in the app | Yes | No | No | No |
Three rules that hold across the table
- Over the automated allowance is not read-only. Those domains stay in the account, scan on demand, and accept edits; the oldest keep the automation.
- KEV and CVE alerts are not plan-gated. They match every account's observed software. On Free the inventory only advances when you scan by hand.
- Every plan is told what is wrong and how to fix it. What Enterprise buys with Ask NHM is a person doing it with you.
Admin grants
An operator can grant an individual account the SEO and Local SEO capabilities, or change which plans get automation, without changing the plan itself. If your account has something the table says it should not, that is why.
Where to see your own numbers
- iOS: Account, the plan card ("n of m watched · daily scans · renews
<date>"). - Web: Settings, Plan;
GET /api/auth/mereturns the plan and ad-free state;GET /api/seo-results/policyreturns the SEO allowances.
Keep reading
Related articles
- Changing plansWhat happens to your domains, alerts, API keys, DMARC reports and report branding when you upgrade, downgrade, cancel, or a subscription lapses.Plans and billing ·Updated
- The domain setup guideThe per-domain checklist computed from what is actually set up: first check, alerts, email records, DMARC reports, ownership proof, monitoring and more.Getting started ·Updated
- Credits, quotes and pricesWhat every Local SEO action costs in credits, the monthly allowances, the quote-first rule, and how a timed-out action is recovered, not paid twice.Local SEO ·Updated