Every plan includes the API, SBOM scans with SARIF and the MCP server. Paid plans add alerts and continuous host monitoring.
Enough to poll the API every 20 minutes and watch 3 hosts
For one person running threat-finder on their own servers. Personal and freelance use.
Billed monthly · incl. 21% VAT
Individual limits, personal licence, no renewals.
Enough to poll the API every 5 minutes and watch 10 hosts
For a small team wiring Radar into one tool. Commercial licence.
Billed monthly · incl. 21% VAT
Enough to poll the API every minute and watch 50 hosts
For security teams with several integrations and CI scans. 5× Base usage, 3× the price.
Billed monthly · incl. 21% VAT
Enough to poll the API every 15 seconds and watch 200 hosts
For MSSPs and integrators serving many clients. 20× Base usage, 10× the price.
Billed monthly · incl. 21% VAT
Prices include 21% VAT. EU businesses with a VAT ID confirmed in VIES and customers outside the EU pay them excl. VAT.
More than 200 hosts, bulk export or redistribution rights, an SLA and annual invoicing. Priced per contract.
30 API requests a day, the live dashboard and threat map. 2 hosts to scan and register with threat-finder; alerts and the decision ledger start at Individual. No card required.
Every plan includes the live dashboard, threat map, weekly newsletter, and community reviews.
Swipe the table to compare all plans →
| Feature | Free€0 | Individual€12/mo | Base€49/mo | Pro€149/mo | Enterprise€490/mo |
|---|---|---|---|---|---|
| API | |||||
| Requests / day | 30 | 75 | 300 | 1,500 | 6,000 |
| Requests / hour (burst) | 20 | 25 | 75 | 375 | 1,500 |
| Requests / month | 900 | 2,250 | 9,000 | 45,000 | 180,000 |
| Results per page | 10 | 25 | 50 | 100 | 100 |
| Matches per batch / packages per scan | 50 | 200 | 200 | 1,000 | 4,000 |
| SBOM scan, SARIF, GitHub Action | |||||
| MCP server | |||||
| Compare / prioritize CVEs | 10 (50 via API) | 50 | 50 | 50 | 50 |
| Host monitoring | |||||
| Monitored hosts | 2 | 3 | 10 | 50 | 200 |
| Assets per host | 2,000 | 5,000 | 5,000 | 25,000 | 100,000 |
| Continuous monitoring and alerts | |||||
| threat-finder CLI (open source) | |||||
| Alerts and integrations | |||||
| Email alerts | |||||
| Escalation alerts | |||||
| Decision ledger + VEX | |||||
| Webhooks | 2 | 10 | 50 | 200 | |
| Slack integrations | 1 | 5 | 25 | 100 | |
| Deliveries / month | 2,500 | 25,000 | 125,000 | 500,000 | |
| Custom feeds | 3 | 10 | 50 | 200 | |
| Starred threats | 50 | 200 | 1,000 | 4,000 | |
| AI refreshes / day | 5 | 20 | 100 | 400 | |
| Support and licence | |||||
| Support | Community | Community | Email, 2 business days | Email, next business day | Priority, 4 business hours |
| Onboarding, invoice and PO | |||||
| Licence | Personal | Personal | Commercial | Commercial | Commercial |
Lifetime licences bought before October 2026 keep their original limits, shown in the table as Lifetime (legacy).
Enter your email and billing country, then pay on the secure checkout of our payment provider, Mollie. Your plan is active as soon as the payment is confirmed. There is no password to create: you sign in with a one-time code sent to your email, and you can complete your profile later.
Enter your email, complete payment, and your account is live.