Pricing
We Price on Your Scope, Not on a Tier.
External surfaces differ in size, and teams run different mixes of modules. Pre-cut tiers mean paying for what you don’t use or hitting a ceiling on what you do, so we quote on your scope and you leave the conversation with a written number.
Seedacme.example
Monitored and billed
acme.exampleDomain
www.acme.exampleSubdomain
never bundled with its domain
staging.acme.exampleSubdomain
198.51.100.10IP address
4 assets in scope
Ignored
not billed
old-campaign.acme.exampleSubdomain
Modules EASM (in use) CTI BRP (in use) TPRM DSI
Pay only for the modules you use
What Shapes the Number.
Each quote starts from the questions below, and the answers differ by customer.
Your Scope
The number of internet-facing assets the Deepinfo Platform discovers and monitors for you: domains, subdomains and IP addresses. It is the biggest driver, because more assets mean more scanning, compute and storage.
The Modules You Use
External Attack Surface Management, Cyber Threat Intelligence, Brand Risk Protection, Third-Party Risk Management and Deep Search & Insights. Most customers start with one or two and add the rest as their program matures, without re-papering the deal.
Integration Depth
Custom integrations, dedicated tenancy and specific data residency requirements add to the quote. The integrations page covers how the platform connects to the rest of your stack.
Service Component
The platform is self-serve, with onboarding and support included. Managed program operation, custom analyst work and threat research advisory are optional and quoted separately.
Included at Any Scope.
Scope sets how many assets are monitored, and each one gets the full depth. These come with every engagement.
- Continuous monitoring: every monitored asset, scanned on each layer: WHOIS, IP WHOIS, DNS, SSL, ports, web data and HTTP.
- Vulnerability intelligence: each CVE with its CVSS score, EPSS probability and CISA KEV status, prioritized on all three.
- Compliance mapping: OWASP Top 10 2021, PCI DSS 4.0, PCI DSS 3.2, HIPAA, CWE, CAPEC and WASC.
- Reports: from the executive summary and weekly progress to asset, vulnerability and issue detail, plus the CTI email breach summary.
- Notifications: for all event types, delivered instantly, hourly, daily, weekly or monthly.
- People: onboarding, a dedicated customer success manager and customer support.
- Security and data handling: sub-processors, data handling and our disclosure policy are documented on Trust & security.
Scanall checked
shop.acme.example
-
WHOIS
whoisacme.example · renews in 41 days
-
IP WHOIS
ipwhoisAS64500 · 198.51.100.0/24
-
DNS
dnsA 198.51.100.77
-
SSL
ssl*.acme.example · valid for 212 days
-
Ports
port_scan443/tcp · TLS 1.3
-
Web data
webdataPHP 7.4 · end of life
High -
HTTP
http200 · response headers
Each Asset Counts Once.
An asset is anything internet-facing the platform monitors for you. Domains, subdomains and IP addresses each count once, so a domain and its subdomains are separate assets, never a bundle.
Discovery proposes assets from a seed, usually your main domain. Your team decides what to monitor, and the discovered assets you ignore are not billed.
| Domain | One asset |
|---|---|
| Subdomain | One asset, never bundled with its domain |
| IP address | One asset |
| Discovered, approved | Monitored and billed |
| Discovered, ignored | Not billed |
Programs Worth Knowing About.
Volume discounts apply to multi-year commitments and large scopes. We don’t publish percentages because they vary by scope and term, but you see them at quote time.
Startups
Startup Program
Discounted platform access for qualifying early-stage companies that need external monitoring before they have a security team.
Researchers
Researcher Program
Free or reduced-cost access for academic, security, journalistic and civil-society research with a public-benefit output.
Non-profits
Non-Profit Program
Substantially discounted access for registered non-profits, with deeper discounts for smaller organizations.
The Data Is Priced on Its Own.
Deepinfo Data Feeds and API Services are priced separately from the platform, by volume and frequency. Some customers buy only the data, others buy both.
API plans set the rate limits, per key and per endpoint, and the documentation lists the defaults. Some endpoints, lookups among them, also count against a plan quota at one unit per request.
- Priced by
- Volume and frequency
- Rate limits
- Set by your plan
- Quota
- One unit per lookup
- Buying
- Data only, or with the platform
Everything We Get Asked About Pricing.
Why don’t you publish prices?
Because “what does Deepinfo cost?” has no single useful answer. A bank monitoring tens of thousands of assets across a dozen subsidiaries and a young SaaS company with a few hundred assets need very different quotes, and one published number would mislead both. Talk to us and we can quote from a single call.
Can we try Deepinfo before we buy?
There is no self-serve trial. A demo shows the platform on your own domain, and for a fuller evaluation we run paid pilots on a portion of your environment over 30 to 60 days, with a clear path to convert if you continue. To evaluate the data feeds or the API, talk to the data team.
Is there a minimum commitment?
Annual commitment is standard. Multi-year terms of two to three years get pricing concessions, and quarterly terms are possible in specific cases: talk to us.
How does pricing change as we grow?
Price follows the scope you monitor. As your asset count grows, pricing moves at predictable points, with overage handling rather than sudden jumps mid-term. We re-baseline the scope at renewal.
Do you offer discounts for startups, non-profits or researchers?
Yes, through three programs, each with its own eligibility test: the Startup Program, the Non-Profit Program and the Researcher Program. A person reads every application, and borderline cases are reviewed individually.
Can we buy through a reseller or a managed-service partner?
Yes. Resellers sell the platform through their own commercial relationship with you, and managed-service partners run it for you as part of an ongoing service. Either way you get the same engine and scoring for the scope agreed; see the partner program.
How is billing handled?
Subscription fees are paid in advance for the billing cycle you choose. A price change for a renewing term is announced in advance, with the notice period set in your order. The Terms of Service have the details.
Where do we see how much API quota we have used?
In the platform, under Settings, then Organization Settings, then API Usage. Each API response also carries rate-limit headers with the requests left in the current window, so a job can pace itself.
Tell Us Your Scope. We’ll Send a Number.
On a call with a Deepinfo sales engineer we talk through your environment, the modules you’re considering and any integration constraints. You leave with a written quote.