Catch threats before the federal mandate. May 2026 average lead: 31 days across 6 receipts. 1M+ IOCs. Precursor signals 1-5 hours early. See the methodology →
“A live production platform processing real threats in real time, 275 organizations pulling your STIX feed across 46 countries, US Navy and Australian critical infrastructure as registered users, SAM.gov federal registration, and two validated breach predictions before public disclosure — that’s a level of demonstrated capability that most early-stage security companies spend years and millions of dollars trying to establish.”
Open-source Cloudflare Worker for edge-level threat blocking. Pairs with the STIX feed to block malicious IPs at the edge before they reach your infrastructure. View on GitHub →
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Daily Queries | 25 | 2,000 | 50,000 |
| All Indexes Searchable | ✓ | ✓ | ✓ |
| VS Code / Chrome / CLI / Obsidian Plugins | ✓ | ✓ | ✓ |
| Community Documentation | ✓ | ✓ | ✓ |
| Butterbot Onboarding Agent | — | ✓ | ✓ |
| Integration Support Docs | — | ✓ | ✓ |
| Tor Relay & Attribution API | — | ✓ | ✓ |
| OPNsense / Suricata Feeds | — | ✓ | ✓ |
| Dedicated Agent Context | — | — | ✓ |
| Priority IOC Ingestion (1hr) | — | — | ✓ |
| Custom Integration Support | — | — | ✓ |
| Quarterly Threat Briefing | — | — | ✓ |
| Behavioral Intelligence API | — | — | ✓ |
| Attack Surface Scanner | — | — | ✓ |
| SLA | None | 24-hour email | 4-hour response |
| Support | Community | Dedicated | |
| Price | $0/mo | $99/mo ($948/yr) | $995/mo ($9,950/yr) |
Card, Link, Cash App, Klarna, Affirm, ACH. Instant activation.
Cancel anytime. Annual billing saves 20%.
Recorded Future starts at $10,000/year per seat. ThreatConnect starts at $18,000/year. CrowdStrike Falcon Intelligence is $25,000+/year. Anomali ThreatStream quotes $50,000+/year for enterprise. Mandiant Advantage requires a sales conversation and six-figure contracts.
DugganUSA Pro is $99/month. $1,188/year. For 2,000 queries/day across 1,089,889 IOCs, 10,269 Tor relays, 361 adversary profiles, and 46 indexes. With 12 integrations that work in your editor, your browser, your Slack, your SIEM. No seat licensing. No per-endpoint pricing. No sales call required.
We also publish original research the big vendors don't have: Tor infrastructure attribution with operator clustering, domain staging detection that caught ShinyHunters infrastructure 7 months pre-breach, C2 infrastructure monitoring that found The Gentlemen's victim-named subdomains before any vendor report. Behavioral scoring from live honeypots, not aggregated third-party reports. 10-signal precursor system with 1–12 month lead time.
Microsoft, Google, Amazon, Starlink, BT UK, SinoPac Holdings, PT Telkom Indonesia — 275+ security teams across 46 countries pulling daily.
25 queries/day across all indexes. VS Code, Chrome, CLI, and Obsidian plugins included. Community documentation. No SLA, but enough to evaluate everything we offer.
Use code RESCUEME at checkout for 40% off your first month of Pro. That's $59.40 instead of $99 to get started with 2,000 queries/day and full integration support.
All existing free accounts keep free access. Founding customers: email [email protected] for special pricing.
1,089,889 IOCs · 275+ consumers · 46 countries · 10,269 Tor relays
Secure payment via Stripe — Card, ACH, Apple Pay, Google Pay