Simple, Transparent pricing
Flexible pricing for security intelligence
Datazag pricing is structured around how intelligence is consumed — from upstream security signals, to brand-specific phishing incidents, to legal-ready takedown evidence, and large-scale domain intelligence datasets. Pricing below reflects enterprise list pricing. Partner and MSSP pricing is available under separate agreements.
Threat Alerts
Threat Alerts provide early detection and investigation of phishing campaigns and malicious domain infrastructure — before sites go live or emails are delivered.
Designed for SOCs and MSSPs, this capability combines real-time signalling with deeper, brand-scoped phishing alerts.
Security Signalling (SIEM & SOAR)
Near-real-time alerts on newly created domains and infrastructure associated with phishing and abuse.
Best for: SOC teams, SIEM users, ESP abuse teams, MSSPs
Foundation
Designed for integration, evaluation, and early signal consumption, including:
- SSL issuance detection
- Live DNS and infrastructure context
- HTML retrieval and parking detection
- Lifecycle status updates
- Structured JSON signals
- Standard polling cadence
Operational
Designed for active SOC operations - everything in foundation, plus:
- Screenshot capture when sites become active
- Visual similarity confidence (qualitative)
- Continuous lifecycle tracking
- Registrar abuse contact details
- Increased polling frequency - every 5 minutes
- Extended investigation window to support multi-day investigations and shift handovers
Enterprise
Designed for scale, high-volume signalling, and service-provider use. Available via cloud marketplaces and private offers.
- High-volume signal processing
- Priority signal handling
- Custom payload fields for SIEM / SOAR alignment
- Screenshot capture when sites become active
- Visual similarity confidence (qualitative)
- Longer investigation window for complex or distributed investigations
- Optional SLAs and dedicated support
Security Signalling identifies suspicious infrastructure early.
Phishing Defence adds brand context and takedown intelligence when impersonation is detected.
Phishing Defence
Brand-scoped phishing incidents with evidence and lifecycle tracking
Phishing Defence converts upstream security signals into brand-specific phishing incidents, enriched with evidence and escalation intelligence.
Best for: Enterprises, ESPs, MSSPs managing active brand impersonation risk.
Single Brand
5 Brand Pack
10 Brand Pack
All tiers include
- Early incident creation during infrastructure setup
- Live DNS, mail, and hosting assessment
- Visual evidence capture and similarity analysis
- Stateful lifecycle tracking
- Takedown-ready intelligence
Domain Intelligence
Access to Datazag's Domain intelligence database is available via API and Cloud Shares depending on your need. API credits can be purchased directly by signing up through our portal or talking to our sales teams Cloud share are also available directly though the cloud marketplaces, enabling you to take advantage of any committed spend on these platforms. You can also gain direct access to our data by contacting our sales team.
Domain Intelligence provides real-time and historical context for domains observed in security, fraud, and compliance workflows.
Available via API and cloud data shares, it enables enrichment, investigation, and large-scale threat hunting.
Best for: Enterprises, ESPs, MSSPs managing active brand impersonation risk.
Domain Intelligence API
Real-time domain enrichment for security, email, and compliance workflows
The Domain Intelligence API provides low-latency enrichment for domains observed in operational workflows. It delivers DNS, mail, infrastructure, and risk context to support security investigations, email hygiene, and KYC / KYB validation.
Best for:
SOC tooling, SIEM/SOAR enrichment, ESP abuse and compliance teams, KYC/KYB workflows, product integrations
Developer
Designed for evaluation and integration.
- 100,000 API queries/month
- Checks mailability and trustworthiness
- 10 Requests per second
- Renewable for 3 Months
- Community & Docs Support
- No commercial use - For non-commercial projects and development testing only
Business
Designed for production workflows
- Everything in Developer, plus
- 1M API queries/month
- 50 requests/sec
- Auto renewal
- Automatic pro-rata overage to prevent disruption in service
- Email & chat Support
- For commercial projects
Enterprise
Designed for platforms, ESPs, and service providers operating at scale.
- Everything in Business, plus:
- Custom query volumes (multi-million / month)
- Core DNS data
- Basic Risk Score
- Phishing, Malware, Parked, Mailable & Disposable Flags
- Email & chat Support
- For commercial projects
Usage notes
- Query limits are designed to support predictable workloads
- Temporary burst capacity is supported
- Sustained volume increases are handled via plan upgrades
- Historical and time-travel analysis is available via the Domain Intelligence Data Share
Usage management
Plans are designed to support predictable workloads.
If sustained usage exceeds plan allowances, access is adjusted via a pro-rata upgrade to the appropriate tier, rather than per-request overage billing.
Brand Protection
Legal-ready evidence packages for brand misuse
Brand Protection supports marketing and legal teams in documenting and addressing brand misuse and impersonation — whether or not malicious intent is present.
Packages are delivered per incident and focus on evidence, documentation, and controlled escalation.
Best for: Legal, brand protection, trust & safety teams
Brand Defender
Best for occasional brand misuse, initial validation, controlled escalation
- Standard evidence pack
- Timestamped screenshots
- Incident timeline (live capture window)
- Incident timeline (live capture window)
- Risk context and rationale summary
Corporate Guardian
Enhanced documentation suitable for legal and policy escalation. Best for Trademark enforcement, legal review, repeat misuse cases.
- Includes everything in Brand Defender, plus:
- Forensic screenshots (home, privacy, terms pages)
- HTML and content hashing
- Enhanced infrastructure context
- Legal-ready PDF export
Global Enterprise
API-first delivery for organisations managing brand protection at scale.
- Everything in Corporate Guardian, plus:
- API-delivered evidence packages (JSON)
- Integration with case management or takedown vendors
- Historical evidence retention
- Priority abuse contact intelligence
Ready to get started?
Transparent pricing, explainable signals, and flexible delivery via API, feeds, or webhooks.