Pricing

Pricing for AI-ready threat intelligence.

Start free with the MCP connector and ThreatDrop. Upgrade for real-time API access, the live credential feed, and CSV/JSON export. STIX export starts at Threat Intel Pro; real-time TAXII is Enterprise. Self-serve, card upfront, no sales call — enterprise pilots when you need SLA and custom delivery.

Community

$0/ forever

Free MCP connector, ThreatDrop email forwarding, and a redacted preview of the live intel feed.

  • Open-source BlackDome MCP server
  • ThreatDrop: forward suspicious emails, free
  • Redacted IOC evidence preview
  • Aggregated, rate-limited queries
  • 72-hour data delay
Connect MCP Free
FIRST 100 LOCK $49/MO

Analyst

$99/ mo

Real-time intel for individual analysts, red-teamers, and consultants. Card upfront, 14-day trial, no sales call.

  • Everything in Community
  • Real-time IOC and attacker API — no 72h delay
  • Full unredacted IOC values (credential feed excluded)
  • CSV / JSON export
  • ~6,000 queries/month, 30-day lookback
Start Analyst Trial

Credential Intel

$199/ mo

The live feed of usernames and passwords attackers are typing into our honeypots right now — full values, not breach-corpus guesses.

  • Everything in Analyst
  • Full-value attacker-typed credential feed
  • Per-protocol filters (SSH, FTP, RDP, Telnet, web)
  • Bulk export via paged CSV/JSON API
  • Full plaintext values, unlocked at checkout
Start Credential Intel
NEW

Credential Intel Pro

$499/ mo

For SOC and threat-intel teams pulling the feed at scale. Self-serve, card upfront, 14-day trial.

  • Everything in Credential Intel
  • 5× throughput — 1,500 rpm / 25k requests per day
  • Priority support channel (AI-assisted, 4h first response)
  • Quarterly campaign dossier included ($299 value)
  • Early access to new protocols and feed fields
Start Pro Trial

Enterprise

From $15,000/ yr

Annual intelligence delivery with SLA, custom retention, and OEM options. Paid pilots ($3,000–$5,000) credited against the first year.

  • Everything in Credential Intel Pro
  • Contractual freshness and uptime SLA
  • Custom retention and data residency discussion
  • OEM / embedded intelligence delivery
  • Dedicated support channel
Discuss a Pilot
Live proof

Credentials attackers typed into our honeypots — last hour

Pulled live from the real capture dataset, passwords masked. Paid plans get full values, cross-protocol reuse analytics, and the API.

Last 1 hours
Connecting to live capture feed…
See the full credential product
UsernamePasswordProtocolSourceCaptured
Waiting for live captures…

Brand protection

Brand Monitoring

For marketing and legal teams: catch typosquats and phishing sites impersonating your brand before your customers do. Self-serve, separate from the intel tiers.

Brand Monitoring

$49/ mo

Typosquat-domain and phishing-impersonation monitoring for one brand domain.

  • 1 protected domain
  • Typosquat and lookalike-domain detection
  • Phishing-site impersonation monitoring
  • Weekly report with evidence packs
Start Monitoring

Brand Monitoring Scale

$149/ mo

Monitoring across a brand portfolio, with faster detection and priority alerts.

  • 10 protected domains
  • Daily monitoring and priority alerts
  • Takedown-ready evidence packs
  • Automated takedown attempts with tracked provider status
Start Scale

One-time attack campaign reports — $299

A dated, analyst-grade campaign and evidence report from live sensor data. One engagement, no subscription — a low-risk way to judge quality before committing.

Browse Reports

Where the data comes from

Everything we sell is first-party: captured live on our own honeypot network (six edges, twenty emulated services). "Credential Intel" means the exact username/password combinations attackers type into our decoys — attacker-tooling intelligence, not breach dumps and not leaked-user databases. See the sensor network for exactly what runs and what each service captures.

Annual billing is charged once per year at the listed price (two months free versus monthly). Prefer a different payment method or procurement flow? Email sales@blackdome.ai and we will work with your team.