A domain says "on demand" or "past your plan limit"

What the message means

Every plan holds unlimited domains but watches a fixed number without being asked: 3 on Free, 25 on Starter, 100 on Pro, unlimited on Enterprise. A domain past that number reads "on demand" in its header and its setup guide shows "Watched every night" as blocked by plan.

What still works

• Scan now, the security checkup, the homepage SEO scan, the lookalike check, subdomain discovery, and a manual exposure scan, within the plan's manual allowances.
• Editing the domain, its group, its client, its notes and its scan settings.
• Removing it.

What stops

• The nightly scheduled scan and the change detection that rides on it.
• The five-minute uptime probe.
• Scheduled exposure scans and the lookalike watch for that domain.

Which domains keep the automation

The oldest domains on the account, by the date they were added. Removing an old domain frees its slot for the next oldest.

"Read-only" in an older app build

Builds before 2026-09-12 showed a "Read-only — past your plan limit" finding and disabled Scan now on such a domain. The server never refused those scans; the app was wrong. Update the app.

Fixes

• Raise the allowance: Starter (25) or Pro (100). See Plans compared.
• Or remove domains you no longer need watched; the slot passes to the next oldest.
• Or leave it: an on-demand domain is still in the inventory, which is the point of unlimited holding.

Related

• What runs automatically
• Changing plans

Why the cap is on automation, not on holding

Holding a domain costs a row in a database. Watching one costs a scan every night and a probe every five minutes, forever. Pricing the row capped the inventory a customer could see while leaving the recurring cost uncapped, which is backwards; the cap moved to the recurring part on 2026-08-22. An incomplete inventory is how the domain nobody remembered expires, so the inventory is free on every plan.