Simple, Transparent Pricing
Choose based on how many brands you protect, how much response throughput you need, and how your team collaborates on cases.
Actionable Threat Queue
Show teams what needs action now, not every noisy signal the scanners ever touched.
Monitoring That Escalates
Keep weak early signals under watch and automatically promote them when stronger phishing evidence appears.
Evidence-Rich Case Pages
Review screenshots, AI summaries, core evidence, and lane outcomes in one shareable case page.
Tracked Response Workflows
Start response from a threat, follow automated or assisted lanes, and prove what actually changed.
Billing options
Annual contracts, wire transfer, and invoice-based billing are available for Business plan and above. Annual payment is discounted by 2 months. Japanese entity? We issue JPY invoices on request.
Coverage by combat line — what each plan unlocks
OpenBait runs three combat lines. Pick a plan based on which lines you actually need today, not by counting checkmarks. The full feature matrix is below if you want it.
Free
Start monitoring one brand with a lightweight threat queue
Best for: Solo operators and small projects
Assets
1 brand
Response
3 takedowns/mo
History
30 days
- 1 brand asset
- Starter domain discovery coverage
- Actionable threat queue + monitoring
- 5 Canary Tokens
- 3 takedown submissions / month
- Community support
- Social Scout — 1 SNS account (YouTube / X / TikTok / Instagram)
Pro
Give a growing team a cleaner queue, faster review, and assisted response
Best for: Lean security or brand teams
Assets
3 brands
Response
30 cases/mo
History
90 days
- 3 brand assets
- Expanded phishing discovery coverage
- Monitoring that auto-promotes to threats
- AI case summaries and analyst scoring
- 30 Canary Tokens
- 30 assisted response cases/mo
- 90-day case history
- 2-day SLA support
- Social Scout — 3 SNS accounts (YouTube / X / TikTok / Instagram)
Business
Run a high-signal threat program with escalation workflows and tracked lanes
Best for: In-house response and brand protection teams
Assets
8 brands
Response
50 lanes/mo
History
1 year
- 8 brand assets
- Full domain discovery and verification coverage
- High-signal case verification
- Monitoring, exclusions, and escalation workflows
- Unlimited Canary Tokens
- 50 tracked response lanes/mo
- IP Blocklist
- 1-year case history
- 1-day SLA support
- Social Scout — 20 SNS accounts (YouTube / X / TikTok / Instagram)
Enterprise
Scale response orchestration across brands, business units, or managed service operations
Best for: Large enterprises, MSSPs, and multi-org teams
Assets
25 brands
Response
200 lanes/mo
History
3 years
- 25 brand assets
- Max-depth discovery, verification, and triage
- 200 tracked response lanes/mo
- Advanced response workflow automation
- Full REST API access
- SSO/SAML integration
- Multi-org MSSP support
- STIX export
- 3-year case history
- 4-hour SLA (24/5)
- Social Scout — 50 SNS accounts (YouTube / X / TikTok / Instagram)
How we compare (monthly equivalent)
Approximate monthly-equivalent cost for comparable functionality. Reach out for a tailored estimate.
OpenBait Business
$299 / month
Public pricing, self-serve
ACSiON / TOPPAN
~$1,800 / month
Annual, sold via SIer channel
Axur / ZeroFox
~$3,000 / month
Annual contract, custom quote
Memcyco
~$4,000 / month
Annual contract only, FSI-focused
Full Feature Comparison
| Free | Pro | Business | Enterprise | |
|---|---|---|---|---|
| Scout Recon | ||||
| Brand assets | 1 | 3 | 8 | 25 |
| Discovery coverage | Starter | Expanded | Full | Full + Max depth |
| CT Log monitoring | ||||
| DNS Typosquat | ||||
| NRD scanning | ||||
| Google Search | — | |||
| Visual similarity | — | — | ||
| UA Cloaking detection | — | — | ||
| DNS scan depth | Quick | Standard | Full | Max |
| Discovery cadence | — | Daily | Daily+RT | Daily+RT+OnDemand |
| AI case summaries | — | |||
| Case history retention | 30d | 90d | 1yr | 3yr |
| Sensors & Runtime Signals | ||||
| Runtime sensors (SDK) | Free | Free | Free | Free |
| Canary token slots | 5 | 30 | Unlimited | Unlimited |
| Beacon triggers | ||||
| IP Blocklist | — | — | ||
| Social Scout SNS Monitoring | ||||
| SNS protected accounts | 1 | 3 | 20 | 50 |
| Supported platforms | All platforms | All platforms | All platforms | All platforms |
| SNS scan frequency | Weekly | Every 3 days | Daily | Daily |
| SIRS risk scoring | ||||
| Avatar similarity detection | — | |||
| Response Workflows | ||||
| Case pages & evidence | ||||
| Monitoring & auto-escalation | ||||
| Response throughput | 3/mo | 30/mo | 50/mo | 200/mo |
| Response mode | Manual review | Assisted | Tracked lanes | Advanced orchestration |
| Shareable case links | ||||
| Platform | ||||
| Team seats | 1 | 3 | 10 | Unlimited |
| Webhooks | — | 1 | 5 | Unlimited |
| REST API | — | — | — | |
| SSO/SAML | — | — | — | |
| STIX export | — | — | ||
| Multi-org MSSP | — | — | — | |
| Support | Community | 2-day SLA | 1-day SLA | 4hr SLA (24/5) |
Frequently Asked Questions
Free tier is subject to daily scan rate limits and API throttling to prevent abuse.
Ready to get started?
Open your workspace right after signup and begin tracking brand assets, threats, and response lanes.
Get Started Free