Pricing that scales with your traffic

Compare all features

Choose the plan that fits your traffic and budget. Every plan ships the full detection stack.

How does billing work?

You subscribe to a monthly plan sized by your traffic. Bigger plans carry a lower effective rate per 1,000: $3.96 on Starter, $2.66 on Growth, $1.99 on Scale. The more traffic you send, the less each identification costs.

How many identifications do I need?

One identification is one visitor check. The simplest way to size a plan is to start free and watch your usage, then extrapolate. For a quick estimate, count the monthly visits to the pages where you'd run a check: signup, login, checkout.

Do you charge per user or per MAU?

No. You're billed per identification (per check), not per monthly active user. You pay only for the checks you make, with no per-user surcharge.

What counts toward my monthly identifications?

One shared budget covers everything billable: each visitor check from the snippet is one identification, and a History API lookup costs one per record returned (at least one per lookup). Webhooks (including retries), viewing the dashboard, data exports, and profile/setup calls never count.

What's in the Free tier?

Exactly the same as the paid plans, just capped at 5,000 one-time identifications.

Is there an annual discount?

Yes. Billing yearly saves 20% and quarterly saves 10%, on every paid tier. Monthly is the default.

Can I change my plan later?

Yes. Upgrade or downgrade anytime from your dashboard. Plans are sized by monthly volume, so you move to the tier that fits your traffic. Self-serve, no sales call.

What happens if I exceed my monthly identifications?

When your monthly balance runs out, further checks return a 402 (Payment Required) until you top up or move up a tier.

What if I exceed 500,000 identifications a month?

Scale covers 500,000 at $1.99 per 1,000. For more, email [email protected] for a committed-volume quote.

Am I protected from overpaying during an attack?

Yes. Built-in DDoS and surge protection rate-limits and blocks abusive traffic at the gateway, before it becomes a billable identification, so a flood from a single source won't run up your bill.

Do you block users, or do I decide?

You decide. ShieldLabs returns a risk score and the signals behind it; your rules choose whether to allow, challenge, or block. We never block anyone automatically.

What is the Identity Graph?

It links visitors, devices, and accounts over time so the abuse patterns can spot coordinated activity across sessions, the layer that catches multi-accounting and account farms. It's included on every plan.

How long do you keep my data?

Visit data is retained for 90 days, then purged. Available on every plan.