Loading page…
Loading page…
Choose the search and monitoring tools that fit your workflow
200 finding views over the life of your account, 10 distinct searches per UTC day, and 3 saved searches. File contents and credentials are not provided.
Get started freePerfect for security researchers
or $39 one-time for lifetime access
For security teams & companies
Per seat, billed annually
Secure payment powered by Stripe. Cancel anytime.
Indexed exposure findings
Storage provider types
Reverify + new-finding scans
| Feature | Free | Member | Enterprise |
|---|---|---|---|
| Finding views | 200 lifetime | Unlimited | Unlimited |
| Distinct text searches | 10 per UTC day | Unlimited | Unlimited |
| Saved searches | 3 | Unlimited | Unlimited |
| Advanced filters | — | Included | Included |
| File contents / credentials | Not provided | Not provided | Not provided |
| Brand monitors | 0 | 1 | Unlimited |
| Alerts and webhooks | — | — | Included |
| API access | — | — | Included |
| Priority support | — | — | Included |
The free finding-view allowance does not reset. Plans do not include file browsing or credential access. Usage remains subject to the service’s access controls and terms.
Yes. Monthly plans stop at the end of the current billing cycle; lifetime is one-time and non-refundable. Enterprise subscriptions can cancel auto-renew at any time.
Each seat covers one named user with unlimited brand monitoring, the API, alerts, and webhook notifications. Volume discounts kick in at 10+ seats: get in touch for a quote.
Yes. Standard DPA, current sub-processor list (Stripe, Google, Resend, Cloudflare), and 72-hour breach notification are documented in our Privacy Policy section 6A and provided on request for Enterprise prospects.
The Enterprise API returns paginated findings as structured JSON, with search, provider, status, and app-ID filters. See API Docs for available endpoints and request-volume guidance. Search filters do not verify asset ownership.
Application data is stored in EU West, encrypted at rest. Edge cache is global via Cloudflare.
The scanner runs a daily reverify cycle to prune findings that have been remediated, and continuously discovers new misconfigured buckets via dictionary expansion.
Question we didn't answer? Drop us a line.