Threat Intelligence pricing
Threat intelligence pricing that scales with the signals you collect
Aggregate, enrich, and analyze your security signals with the same Free, Startup, Growth, Scale, and Enterprise ladder, metered by signals analyzed each month and how long you retain them.
Basic insights to get started.
- 50k Signals / mo
- Basic Threat events
- 1 Enrichment sources
- 7 days Retention
Small-scale threat-signal analysis.
- 500k Signals / mo
- Standard Threat events
- 3 Enrichment sources
- 30 days Retention
Growing security intelligence program.
- 5M Signals / mo
- Advanced Threat events
- 8 Enrichment sources
- 90 days Retention
Advanced, high-volume threat intelligence.
- 25M+ Signals / mo
- Advanced + custom Threat events
- 15+ Enrichment sources
- 1 year Retention
Custom feeds, private models, and workflows.
- Custom Signals / mo
- Custom Threat events
- Custom Enrichment sources
- Custom Retention
Indicative monthly pricing in EUR. Annual billing and custom volumes available — talk to us for a tailored quote.
Compare plans
Everything in Threat Intelligence, tier by tier
| Feature | Free | Startup | Growth | Scale | Enterprise |
|---|---|---|---|---|---|
| Signals analyzed / mo | 50k | 500k | 5M | 25M+ | Custom |
| Threat event detection | Basic | Standard | Advanced | Advanced + custom | Custom |
| Data retention | 7 days | 30 days | 90 days | 1 year | Custom |
| Enrichment sources | 1 | 3 | 8 | 15+ | Custom |
| Intelligence feeds | Community | Curated | Curated + premium | Premium + custom | Private feeds |
| AI analysis actions / mo | 1k | 10k | 100k | Custom | |
| Indicator search & lookups | |||||
| Custom watchlists | 5 | 25 | Unlimited | Unlimited | |
| Alerting & notifications | |||||
| Export & API access | |||||
| Private models | |||||
| Security workflow automation | Basic | Advanced | Custom | ||
| Uptime SLA | Custom | ||||
| Support | Community | Priority | Priority + onboarding | Dedicated |
What you're billed for
Usage meter
Threat Intelligence pricing is based on the number of security signals ArxLayer analyzes for you each month and how long you retain the resulting threat data. You pick a plan; if you exceed your monthly signal allowance you can upgrade a tier or add signal bundles.
Meter: Signals + retention
Overage
- Additional signalsIncluded: Your plan allowance€4 per extra 1M signals
- Additional AI analysis actionsIncluded: Your plan allowance€6 per extra 10k actions
- Extended retentionIncluded: Your plan allowance€19 per extra 90 days / mo
Which plan should I choose?
Match the plan to your stage
Exploring basic threat insights on a small signal volume.
Small teams running early threat-signal analysis.
A growing security intelligence program with more sources.
High signal volume and advanced threat intelligence needs.
Custom feeds, private models, retention, and security workflows.
Related
Often used together
FAQ
Threat Intelligence pricing questions
- What counts as a signal?
- Every security event ArxLayer ingests and analyzes for you, such as a blocked request, a reputation hit, or a log entry, counts toward your monthly signal allowance.
- What happens if I exceed my signal limit?
- You can upgrade a tier or add signal bundles. We alert you before you reach your limit and never silently stop analyzing your data.
- What are AI analysis actions?
- They are enrichment and summarization steps run over your signals to cluster, classify, and explain threat events. They do not reason about model intent or detect prompt injection.
- Do you offer annual billing?
- Yes. Annual billing is available, and Enterprise plans add custom feeds, private models, retention, and workflow integrations.
Start protecting with Threat Intelligence
Start free, then scale by usage. Upgrade a tier or add usage whenever you need to.