# Pricing URL: https://www.deepinfo.com/pricing/ ## We Price on Your Scope, Not on a Tier. External surfaces differ in size, and teams run different mixes of modules. Pre-cut tiers mean paying for what you don’t use or hitting a ceiling on what you do, so we quote on your scope and you leave the conversation with a written number. [Talk to us about pricing](https://www.deepinfo.com/contact/) [Platform pricing](https://www.deepinfo.com/pricing/#platform-pricing) · [Data & API pricing](https://www.deepinfo.com/pricing/#data-pricing) ### What Shapes the Number. Each quote starts from the questions below, and the answers differ by customer. #### Your Scope The number of internet-facing assets the Deepinfo Platform discovers and monitors for you: domains, subdomains and IP addresses. It is the biggest driver, because more assets mean more scanning, compute and storage. #### The Modules You Use External Attack Surface Management, Cyber Threat Intelligence, Brand Risk Protection, Third-Party Risk Management and Deep Search & Insights. Most customers start with one or two and add the rest as their program matures, without re-papering the deal. #### [Integration Depth](https://www.deepinfo.com/integrations/) Custom integrations, dedicated tenancy and specific data residency requirements add to the quote. The integrations page covers how the platform connects to the rest of your stack. #### Service Component The platform is self-serve, with onboarding and support included. Managed program operation, custom analyst work and threat research advisory are optional and quoted separately. ### Included at Any Scope. Scope sets how many assets are monitored, and each one gets the full depth. These come with every engagement. - **Continuous monitoring**: every monitored asset, scanned on each layer: WHOIS, IP WHOIS, DNS, SSL, ports, web data and HTTP. - **Vulnerability intelligence**: each CVE with its CVSS score, EPSS probability and CISA KEV status, prioritized on all three. - **Compliance mapping**: OWASP Top 10 2021, PCI DSS 4.0, PCI DSS 3.2, HIPAA, CWE, CAPEC and WASC. - **Reports**: from the executive summary and weekly progress to asset, vulnerability and issue detail, plus the CTI email breach summary. - **Notifications**: for all event types, delivered instantly, hourly, daily, weekly or monthly. - **People**: onboarding, a dedicated customer success manager and customer support. - **Security and data handling**: sub-processors, data handling and our disclosure policy are documented on [Trust & security](https://www.deepinfo.com/trust/). ### Each Asset Counts Once. An asset is anything internet-facing the platform monitors for you. Domains, subdomains and IP addresses each count once, so a domain and its subdomains are separate assets, never a bundle. Discovery proposes assets from a seed, usually your main domain. Your team decides what to monitor, and the discovered assets you ignore are not billed. [How discovery works](https://www.deepinfo.com/platform/easm/smart-asset-discovery/) - **Domain**: One asset - **Subdomain**: One asset, never bundled with its domain - **IP address**: One asset - **Discovered, approved**: Monitored and billed - **Discovered, ignored**: Not billed ### Programs Worth Knowing About. Volume discounts apply to multi-year commitments and large scopes. We don’t publish percentages because they vary by scope and term, but you see them at quote time. Startups #### Startup Program Discounted platform access for qualifying early-stage companies that need external monitoring before they have a security team. [Eligibility](https://www.deepinfo.com/programs/startup/) Researchers #### Researcher Program Free or reduced-cost access for academic, security, journalistic and civil-society research with a public-benefit output. [Eligibility](https://www.deepinfo.com/programs/researcher/) Non-profits #### Non-Profit Program Substantially discounted access for registered non-profits, with deeper discounts for smaller organizations. [Eligibility](https://www.deepinfo.com/programs/npo/) [All programs](https://www.deepinfo.com/programs/) ### The Data Is Priced on Its Own. Deepinfo Data Feeds and API Services are priced separately from the platform, by volume and frequency. Some customers buy only the data, others buy both. API plans set the rate limits, per key and per endpoint, and the documentation lists the defaults. Some endpoints, lookups among them, also count against a plan quota at one unit per request. [Talk to the data team](https://www.deepinfo.com/contact/?topic=data-api) · [Data & API](https://www.deepinfo.com/data-api/) · [Rate limits in the docs](https://docs.deepinfo.com/getting-started/rate-limits/) - **Priced by**: Volume and frequency - **Rate limits**: Set by your plan - **Quota**: One unit per lookup - **Buying**: Data only, or with the platform ### Everything We Get Asked About Pricing. **Why don’t you publish prices?** Because “what does Deepinfo cost?” has no single useful answer. A bank monitoring tens of thousands of assets across a dozen subsidiaries and a young SaaS company with a few hundred assets need very different quotes, and one published number would mislead both. Talk to us and we can quote from a single call. **Can we try Deepinfo before we buy?** There is no self-serve trial. A [demo](https://www.deepinfo.com/request-demo/) shows the platform on your own domain, and for a fuller evaluation we run paid pilots on a portion of your environment over 30 to 60 days, with a clear path to convert if you continue. To evaluate the data feeds or the API, [talk to the data team](https://www.deepinfo.com/contact/?topic=data-api). **Is there a minimum commitment?** Annual commitment is standard. Multi-year terms of two to three years get pricing concessions, and quarterly terms are possible in specific cases: talk to us. **How does pricing change as we grow?** Price follows the scope you monitor. As your asset count grows, pricing moves at predictable points, with overage handling rather than sudden jumps mid-term. We re-baseline the scope at renewal. **Do you offer discounts for startups, non-profits or researchers?** Yes, through three programs, each with its own eligibility test: the [Startup Program](https://www.deepinfo.com/programs/startup/), the [Non-Profit Program](https://www.deepinfo.com/programs/npo/) and the [Researcher Program](https://www.deepinfo.com/programs/researcher/). A person reads every application, and borderline cases are reviewed individually. **Can we buy through a reseller or a managed-service partner?** Yes. Resellers sell the platform through their own commercial relationship with you, and managed-service partners run it for you as part of an ongoing service. Either way you get the same engine and scoring for the scope agreed; see the [partner program](https://www.deepinfo.com/partners/). **How is billing handled?** Subscription fees are paid in advance for the billing cycle you choose. A price change for a renewing term is announced in advance, with the notice period set in your order. The [Terms of Service](https://www.deepinfo.com/terms/#payment) have the details. **Where do we see how much API quota we have used?** In the platform, under Settings, then Organization Settings, then API Usage. Each API response also carries rate-limit headers with the requests left in the current window, so a job can pace itself. ### Tell Us Your Scope. We’ll Send a Number. On a call with a Deepinfo sales engineer we talk through your environment, the modules you’re considering and any integration constraints. You leave with a written quote. [Get a quote](https://www.deepinfo.com/contact/)