On Free, you check.On Pro, we keep watch.
The database and the tools are free for everyone and will stay that way. What you pay for is the watch: when your site goes down, when a flaw appears in software you run, when your certificate is about to expire, we tell you before you notice.
About 1 dollar a day.
What changes when you pay
Four real situations. Left: what happens on Free. Right: what happens on Pro.
01
Your site went down at 3 a.m.
Free
We check every 30 minutes, one site. You hear about it within an hour at the latest.
Pro
We check every 5 minutes, 10 sites. Email and Slack within 10 minutes at the latest; we also tell you when it is back.
02
A flaw that attackers are using right now appeared in software you run.
Free
The Slack/Teams alert goes out once an hour; the email digest once a day.
Pro
The Slack/Teams alert goes out every 10 minutes, so you plan the patch without waiting.
03
A new subdomain appeared on your domain, or a forgotten record was left dangling.
Free
We scan weekly, 2 domains. You see the change up to 7 days later.
Pro
We scan every day, 15 domains. The change is in your notifications the next morning.
04
Your manager or client says “send me the list”.
Free
You download the first 50 records.
Pro
You download the full list (1,000 records) as CSV or JSON.
Which one fits you
To look
Free
“I have one site and want to check on it now and then.”
Free
- The full CVE database and search
- 5 security tools and the scorecard
- 2 domains, weekly scan
- 1 uptime monitor, every 30 min
- Hourly Slack/Teams alerts, daily email digest
To be watched over
Pro
“My site is my business. If it goes down or gets hit, I lose money.”
$29/ month
~$0.97 a day · $290 / year (2 months free on yearly)
- Everything in Free
- 10 uptime monitors, every 5 min
- 15 domains, scanned daily
- 10-minute Slack/Teams alerts
- Full export (CSV / JSON)
- A 10-person team shares the plan
For many sites
Team
“I look after other people's sites too: agency, IT team, MSSP.”
$99/ month
~$3.30 a day · $990 / year (2 months free on yearly)
- Everything in Pro
- 50 uptime monitors
- 100 domains
- 50,000 API calls a day
- A 100-person team shares the plan
What stays free
No data was locked away. The whole CVE database, search, the open data dump, stack matching, SBOM, the five tools, the scorecard, the email digest, RSS and Slack alerts are free. Paid plans add speed and scale on top.
All the details
| Free | Pro | Team | |
|---|---|---|---|
| Uptime monitoring: reachability, IP, Cloudflare proxy, certificate (email + webhook) | 1 | 10 | 50 |
| Uptime check interval | 30 min | 5 min | 5 min |
| Instant alert latency (KEV, exploits, outage) | 60 min | 10 min | 10 min |
| Verified domains (subdomain inventory, tech → CVE, diff notifications) | 2 | 15 | 100 |
| Inventory and tool rescan frequency | Weekly | Daily | Daily |
| Tool watch rows | 5 | 50 | 500 |
| CSV / JSON export (stack × CVE) | first 50 rows | Yes | Yes |
| Active API keys | 2 | 10 | 25 |
| Daily API calls per key | 500 | 10,000 | 50,000 |
| Member scan quota (per hour) | 20 | 60 | 200 |
| Team members | 5 | 10 | 100 |
| Team members use the owner's plan | — | Yes | Yes |
| CVE database, search, CWE, vendor pages, open data dump | All | All | All |
| Stack matching, watchlist, saved searches, SBOM matching | Yes | Yes | Yes |
| Email digest, personal RSS, Slack/Teams/Discord webhook alerts | Yes | Yes | Yes |
| Passive tools: headers, TLS, email security, attack surface, subdomains | Yes | Yes | Yes |
| MCP server (Claude, Cursor…) | Yes | Yes | Yes |
Pay with crypto
Choosing a plan sends you to the payment provider's page where you pick the coin (BTC, ETH, USDT, USDC and others, depending on the provider). No wallet or card details reach Noroxi. After on-chain confirmation the plan activates automatically and a receipt email follows; usually minutes.
Questions
- What happens when the period ends?
- The account returns to the free plan. Nothing is deleted; only limits drop. Records above the limit stay, you just can't add new ones.
- Do I lose days if I renew early?
- No. The new period is added on top of the current end date.
- Is there auto-renewal?
- No. Crypto has no recurring charge; you get an email reminder 7 days before the end.
- Can I get an invoice?
- A receipt email is automatic. For a company invoice open a support request; it is issued by Noroxi LLC (Wyoming, USA).
- How do team members benefit?
- The team owner's Pro or Team plan applies to all members; no separate payment.
- Refunds?
- On-chain payments can't be reversed; if something goes wrong open a support request and we fix it by extending the period.