Plans and pricing
-
Free scan
Try a detonation without creating anything.
No account needed
- 3 scans per source address per day
- Windows 10 22H2
- Network isolated, with no internet egress
- Fixed detonation settings
- The report is public and shareable by link
- No account, no email address
-
Community
For individual researchers getting started.
Free
- 20 scan credits a month, one credit per scan
- Detonation up to 120 seconds a run
- Windows 10 and the Ubuntu 24.04 Linux sandbox
- 1 scan running at a time
- Static and dynamic analysis, with the full behavioural report
- Live VNC while the sample runs
- Network isolated, with no internet egress
- ATT&CK Navigator, STIX 2.1, MISP and defanged IOC exports
- Reports are public
-
Pro Recommended
For professionals who need privacy and depth.
$79/mo
$790/yrbilled yearly
- 200 scan credits a month, one credit per scan
- Detonation up to 300 seconds a run
- All 7 sandboxes, including the Windows Server family
- 3 scans running at a time
- Private reports, visible only to you
- Threat intelligence enrichment on every extracted indicator
- AI analyst narrative, evasion read and the exported report
- Internet-connected detonation, so a sample can reach its C2
- URL and package analysis, which need that egress to run at all
- Retro-hunt: sweep your stored samples with a YARA rule you paste
- Manage your own ruleset of the rules your scans generated
- REST API and MCP server access
-
Business
For a busy analyst who has outgrown Pro.
$199/mo
$1,990/yrbilled yearly
- 500 scan credits a month, one credit per scan
- Detonation up to 600 seconds a run
- All 7 sandboxes
- 5 scans running at a time
- Everything in Pro, at the volume a full-time analyst runs
- Internet-connected detonation, and URL and package analysis
- Private reports, retro-hunt and your own ruleset
- REST API and MCP server access
-
Team / Enterprise
For SOC teams and organizations.
Contact us
- 5,000 scan credits a month, one credit per scan
- Detonation up to 600 seconds a run
- All 7 sandboxes
- 10 scans running at a time
- 10 seats, with invites and role management
- One shared credit pool across the team
- MCP server access for AI clients
- Reports shareable with the organization
- Everything in Business, per seat
There are five ways to use the platform: an anonymous free scan that needs no account, a free Community account, Pro for a single analyst, Business for a heavier workload, and Team or Enterprise for a group that shares one allowance. A paid plan does not change how a sample is analyzed. Allowances are counted in credits, and the plan table lists what each one includes.
How credits work
- What a credit buys
- One detonation. Submitting a sample costs one credit, and your plan grants a fresh allowance every month.
- When it is charged
- At the moment the scan starts, so a submission that cannot be charged never runs and never spends anything.
- The one exception
- A OneShot run detonates the same sample once per image you select, so a run across three images costs three credits.
- Anonymous scans
- Metered by source address instead of credits, so they never draw on an account balance.
Team and Enterprise
The monthly allowance is a shared pool: seats draw from the same balance rather than from personal ones, so a busy week for one analyst does not need a plan change for everybody else.
Pricing questions
The short answers: the anonymous free scan needs no account, the monthly credit grant is what refills an account allowance, private reports start at Pro, and samples stay on hardware we operate.
What does an anonymous free scan include?
3 scans per source address per day, with no account. The sample runs on Windows 10 22H2 with no internet egress and fixed detonation settings, and the resulting report is publicly viewable.
What does starting out require?
The anonymous free scan asks for nothing at all, and a Community account is created with an email address and a password.
What is the difference between monthly and annual billing?
The plan is identical either way; annual is the same plan paid once a year for the price of ten months. Switch the toggle above the plans to see both prices.
What happens when I run out of credits?
New scans stop until your next monthly grant, because the credit is debited at scan start and a scan that cannot be charged is refused rather than queued. Existing reports stay readable, and you can contact us about a larger allowance before the month turns over.
Can I keep a report private?
Private scans are a Pro, Business and Team or Enterprise feature. Anonymous free scans and Community scans produce publicly viewable reports, which is also what makes them citable in the public analyses index.
What happens to my sample?
It stays on the hardware we operate. Only hash values and derived indicators are ever sent to a third party, and the AI layer is given locally derived summaries rather than the sample bytes. The security page describes how that boundary is drawn.
Which analysis images can I choose?
An anonymous free scan is fixed to Windows 10 22H2. Community accounts can select Windows 10, Windows 11 or Ubuntu, and Pro, Business and Team or Enterprise accounts can select any Windows or Linux image the platform operates.
How is a Team or Enterprise plan arranged?
Pro and Business are bought on this page, monthly or annually, and take effect as soon as the payment clears. Team and Enterprise carry seats and a shared credit pool, so they are agreed in a conversation: write to us through the contact page with the volume and the seat count you have in mind.