Simple, transparent pricing

Free for everyday users. Affordable for developers. Built for security teams. No hidden quotas, no usage-based surprise bills.

Free
$0forever

Everything you need for occasional scans.

Start scanning
  • 5 URL scans / day
  • All 10+ threat-intel sources
  • Claude AI page analysis
  • Email scanner (3 emails/day)
  • Typosquat checker
  • WHOIS + DNS + TLS lookup
  • Email header analyzer
  • URL deobfuscator
  • Scan history (last 50)
  • Public scan permalinks
Pro
Most popular
$9/month

For developers shipping URL safety into their app.

Upgrade to Pro
  • 1,000 URL scans / day
  • Public REST API + OpenAPI spec
  • Bulk scanner (50 URLs/request)
  • Browser extension
  • Outgoing webhooks (Slack, Discord, SIEM, JSON)
  • Brand monitoring (weekly typosquat check)
  • Priority email support
  • Unlimited scan history
  • All Free features
Team
$49/month

For security & IR teams running it at production scale.

Upgrade to Team
  • 10,000 URL scans / day
  • Bulk scanner (500 URLs/request)
  • Up to 10 brand watches
  • Multi-seat team accounts
  • Webhook event filters (verdict, brand)
  • SLA + Slack support channel
  • All Pro features
Secure checkout by Stripe · Cancel anytime · No usage-based surprises

Compare side-by-side

The exact differences between tiers.

FeatureFreeProTeam
URL scans / day51,00010,000
Bulk URLs / request50500
Email scans / day33003,000
API access
Browser extension
Outgoing webhooks
Brand monitoring1 brand10 brands
Webhook filters
SupportCommunityEmailSlack + SLA
Team seats115

FAQ

Is there really a free tier?

Yes — 5 scans/day, all 10+ threat-intel sources, no credit card. Use it forever. The paid tiers add API access, bulk scanning, brand monitoring, and outgoing webhooks. Most casual users never hit the free limit.

What threat-intel sources do you use?

Google Safe Browsing, VirusTotal (70+ AV engines), URLhaus (abuse.ch), Claude AI page-content analysis, lookalike-domain detection, RDAP / WHOIS, Cloudflare DoH (DNS records), crt.sh (TLS certificate history), Microlink (screenshots), and our own URL preprocessor (shortener expansion, IDN/punycode decoding).

Can I cancel anytime?

Yes. Cancel from the Plan & Billing tab in your account. No retention emails, no dark patterns.

Do you store the URLs I scan?

Yes, but only the URL, domain, verdict, and confidence — not the page content. Scan permalinks are public-by-URL (anyone with the link can view), but the URLs are not indexed by search engines. See /privacy for details.

What's the API rate limit?

Free: 5/day. Pro: 1,000/day. Team: 10,000/day. Per-URL caching cuts the effective rate even higher for popular domains. Need more? Email hello@phishguard.io.

Can I get a discount for non-profits or open-source projects?

Yes. Email proof of status (anything that demonstrates non-profit / OSS use) and we'll set you up with a discounted Team plan.

Ready when you are

Start with the free tier. Upgrade when you need API access or brand monitoring. No credit card to start.