Simple, token-based pricing
Pay for what you monitor. No per-seat fees, no feature paywalls - domains sharing a server cost less than domains on their own.
cancel anytime - no long-term contractsStarter
10 tokens (~5 typical domains)
- Daily scans
- Noise control (muted exposures)
- Full incident history & audit trail
- Email support
Growth
40 tokens (~20 typical domains)
- Daily scans
- Noise control (muted exposures)
- Full incident history & audit trail
- Priority email support
Enterprise
Custom token count
- Custom scan frequency
- Multi-region scanning (as it becomes available)
- Full incident history & audit trail
- Dedicated support
Questions
What's a token?
Tokens are how usage is measured: each domain you monitor uses 1 token, and each distinct server (host/IP) your domains resolve to uses 1 token too. A typical domain on its own dedicated server costs 2 tokens - so Starter's 10 tokens covers about 5 typical domains. If you run many domains on one shared server (common for hosting companies), the server itself is only counted once - each additional domain sharing it costs 1 token, not 2, so it goes a lot further than the "~5 domains" estimate suggests.
What counts as a domain?
Each root domain or subdomain you add as a monitoring target uses 1 token - SurfaceDiff then discovers and tracks its own subdomains, ports and services underneath it at no extra token cost.
Can I change plans later?
Yes - upgrade or downgrade at any time; the change applies to your next billing cycle.
Is there a free trial?
Yes, for your first domain: run a free scan or register and add a domain directly, and it monitors on the normal daily schedule - alerts included - for 7 days with no card required. After that, it needs an active plan to keep scanning; nothing you've already collected is ever deleted, so you can subscribe whenever you're ready and pick up right where it left off.