Under attack right now? You do not need a plan. Report a live attack

Plans and pricing

Pro and Enterprise check for web addresses made to look like yours every hour, and get the ones used against you taken down.

Free scan

A first look at the lookalikes of one domain, emailed to you.

Free

No card, no account

Run a free scan

We ask for a work email after the scan, to send you the report.

Who it suits: Anyone who wants a first look.

What's included

150+ lookalikes of your domain checked
Which are registered, and which can send email as you
Report by email, usually in a couple of minutes

150+ lookalikes of your domain checked
Which are registered, and which can send email as you
Report by email, usually in a couple of minutes

Threat Report

A one-off report on the lookalikes of your domain, with every finding checked by an analyst.

$249

One-off, per domain

Order the Threat Report, $249

We email a secure payment link within one working day. Takedowns are not included.

Who it suits: You want an analyst's view before committing to a year.

What's included

Around 500 lookalikes of your domain, plus public certificate records
Live fake sites and copies of your website found
Lookalikes set up to send email with no website, the kind used for fake invoices
Lookalikes you registered yourself recognised and left out
Every finding checked by an analyst
A PDF for your board, finance team or insurer, with actions in priority order

Around 500 lookalikes of your domain, plus public certificate records
Live fake sites and copies of your website found
Lookalikes set up to send email with no website, the kind used for fake invoices
Lookalikes you registered yourself recognised and left out
Every finding checked by an analyst
A PDF for your board, finance team or insurer, with actions in priority order

DefendDomain Pro

We check for lookalikes of your domains every hour. You approve each takedown with one click; we send the reports and follow up automatically.

Quote

Priced by number of domains · 5 domains included, add more any time · Annual plan

Request a pricing call

We call you within one working day to talk it through.

or book a 30-minute demo

Who it suits: You have someone who can read alerts and approve takedowns.

What's included

Everything the Threat Report checks, all year, plus:

Lookalikes re-checked every hour: registered ones go on your watch list, and you get an alert when one looks set up to attack you
Alerts for new certificates for names like yours, and for copies of your website
Unlimited takedowns, each approved by you with one click
Automatic follow-ups to the host, registrar and registry
A daily check of your own domains, graded A to F
Alerts by email, Slack, Teams, SMS, webhook or your security tools
Single sign-on and a dedicated account manager

Everything the Threat Report checks, all year, plus:

Lookalikes re-checked every hour: registered ones go on your watch list, and you get an alert when one looks set up to attack you
Alerts for new certificates for names like yours, and for copies of your website
Unlimited takedowns, each approved by you with one click
Automatic follow-ups to the host, registrar and registry
A daily check of your own domains, graded A to F
Alerts by email, Slack, Teams, SMS, webhook or your security tools
Single sign-on and a dedicated account manager

DefendDomain Enterprise

Our analysts check every alert and run the takedowns for you.

Custom

Unlimited domains and brands · Annual plan

Request a pricing call

We call you within one working day to talk it through.

or book a 30-minute demo

Who it suits: You want us to do all of it, or you have many brands.

What's included

Everything in Pro, plus:

Our analysts check every alert before it reaches you
We run the takedowns and follow-ups for you
Quarterly reporting for your board
Unlimited domains and brands
A dedicated team on your account

Everything in Pro, plus:

Our analysts check every alert before it reaches you
We run the takedowns and follow-ups for you
Quarterly reporting for your board
Unlimited domains and brands
A dedicated team on your account

Some of the companies we protect

Awards

The teiss judges are practising security leaders. Read what they saw.

Attacks we got taken down

Fake online stores
Seven fake stores found within three days. Five taken down in the first week, and 14 in the first two weeks.
Read the case study: 14 fake stores taken down in two weeks
Fake invoices
On anti-phishing blocklists the same day. The registrar later took the domain offline.
Read the case study: Fake invoice domain taken offline
Copied website
Offline about 24 hours after the copy was confirmed.
Read the case study: Copied website removed in about a day
Copied website
Offline before any customer, prospect or employee was known to have used it.
Read the case study: Cloned website taken down

Compare the plans

Pick any two plans to compare them side by side.

$249 one-off

Priced by number of domains

What we look for

Lookalike domains checked: Threat Report: Around 500Pro: Around 500 per domain
Which lookalikes can send email as you: Threat Report: Pro:
Live fake sites and copies of your website: Threat Report: Pro:
New certificates for names that look like yours: Threat Report: Pro:
Copies of your website's wording on other sites: Threat Report: Pro:
Every lookalike re-checked every hour: Threat Report: Pro:

Checking and takedowns

Findings checked by an analyst: Threat Report: Pro: No, sorted automatically
Takedowns: Threat Report: Not includedPro: Unlimited, you approve them
Automatic follow-ups to the host, registrar and registry: Threat Report: Pro:

Your own domains

Security gaps on your own domains: Threat Report: Once, in the reportPro: Checked daily, graded A to F

Reporting and support

Report for your board: Threat Report: PDF reportPro: Certificate of Protection
Alerts by email, Slack, Teams, SMS, webhook or your security tools: Threat Report: Pro:
Single sign-on: Threat Report: Pro:
Dedicated account manager: Threat Report: Pro:
Domains covered: Threat Report: 1 per reportPro: 5 included, add more any time

Order the Threat ReportRequest a pricing call

Feature	Free scanFree	Threat Report$249 one-off	DefendDomain ProPriced by number of domains	DefendDomain EnterpriseCustom
What we look for
Lookalike domains checked	150+	Around 500	Around 500 per domain	Around 500 per domain
Which lookalikes can send email as you
Live fake sites and copies of your website
New certificates for names that look like yours
Copies of your website's wording on other sites
Every lookalike re-checked every hour
Checking and takedowns
Findings checked by an analyst			No, sorted automatically
Takedowns		Not included	Unlimited, you approve them	Unlimited, we run them
Automatic follow-ups to the host, registrar and registry
Your own domains
Security gaps on your own domains		Once, in the report	Checked daily, graded A to F	Checked daily, graded A to F
Reporting and support
Report for your board		PDF report	Certificate of Protection	Certificate of Protection and quarterly board reporting
Alerts by email, Slack, Teams, SMS, webhook or your security tools
Single sign-on
Dedicated account manager
Domains covered	1 per scan	1 per report	5 included, add more any time	Unlimited
	Run a free scan	Order the Threat Report	Request a pricing call	Request a pricing call

Pro and Enterprise are annual plans: a 12-month minimum, renewing each year unless you give 30 days' notice.

Certificate of Protection: a PDF confirming which of your domains we protect and what we check. You can share it with your board, auditors, insurer or customers.

Pricing questions

Tell us how many domains you want protected. We call you within one working day to talk through what you need and give you a price on the call.

Request a pricing call

Reselling to clients? See the partner programme

Another question? Contact us

How much do Pro and Enterprise cost?

We do not publish a price yet. It depends on how many domains you protect and whether you want us to run it for you. Request a pricing call and we call you within one working day, or book a 30-minute demo.

What does Pro need from my team?

One person to read alerts and approve takedowns. Alerts are sorted automatically: clear threats come to you as alerts, doubtful ones go on a watch list, and the rest are marked safe. Nothing is sent to anyone until you confirm. If you would rather not do this yourself, on Enterprise our analysts check every alert and run the takedowns for you.

What counts as a domain?

Each web address you want protected, such as yourcompany.com or yourcompany.co.uk. Its lookalikes are covered automatically. Pro includes 5 domains and you can add more at any time; Enterprise covers unlimited domains.

Is there a limit on takedowns?

No. Takedowns are unlimited on Pro and Enterprise. We do not sell takedowns in packs or charge per removal. The free scan and the Threat Report do not include takedowns.

How long is the contract?

Pro and Enterprise are annual plans: a 12-month minimum, renewing each year unless you give 30 days' notice. The free scan and the Threat Report are one-off, with nothing to cancel.

Where should I start?

If you want lookalikes of your domains watched all year and taken down when they are used against you, start with Pro. If you want an analyst's view of what is out there before committing to a year, order the $249 Threat Report. If you only want a first look, run the free scan.

Can I start with the Threat Report and move to a plan later?

Yes, that is what it is for. The report shows you what is out there today. Pro then re-checks every lookalike every hour and lets you take one down when it is used against you.

Does the free scan need a card or an account?

No. Enter your domain, then a work email address (not Gmail, Outlook.com or another free inbox), and the report arrives by email, usually within a couple of minutes.

Do you work with companies outside the UK?

Yes. We work with customers in the US, UK, EU and Asia-Pacific. We watch 240+ domain endings, including country endings, and we report to whichever registrar, host or email provider the attacker uses, wherever it is, and chase them automatically until the fake is down.