Free
Individuals, trying it out
KRW 0
1 domain
- Daily change mail (certificate, DNS, security headers, registration, exposed admin pages)
- Monthly status summary
- Exposed admin page counts
Pricing
External exposure monitoring
One-off checks stay free. The paid plans watch from outside every day and tell you the day a certificate, DNS record, admin screen or an impersonation of your brand changes.
Payments are not open yet. Start on the free plan (1 domain) and ask to be notified about the paid plans. Sign up now and Starter is free for one month (then you are back on Free; nothing is charged). Institutional email accounts have the Business plan free until December 31, 2026.
Starter
Small shops, clinics, academies, startups
KRW 14,900/mo · excl. VAT
Free for one month when you sign up now
3 domains · 1 brand watched
- Everything in Free, plus
- Actively exploited vulnerability alerts within the hour — when a product seen on your site enters CISA KEV or KISA reports it exploited
- New host alerts when an unseen subdomain appears
- Certificate issuance and delegation watch (unfamiliar issuers highlighted; name server, DNSSEC, registrar and lock changes within the hour)
- Site tampering watch — new external scripts or fake verification screens
- Brand impersonation alerts + report bundle (registrar and hosting contacts, observation hashes)
- Site clone detection — when a copy of your page opens on another domain (only copies we confirmed)
- 90-day change history and CSV export
Business
SMEs with a security lead
KRW 49,000/mo · excl. VAT
10 domains · 5 recipients · 3 brands watched
- Everything in Starter, plus
- Monthly executive report (printable, with sector comparison)
- Attack surface management (ASM) — internet-facing servers, admin screens, certificates, ports and KEV, ranked by risk
- Vendor monitoring — your suppliers' domains on public checks weekly, alerts when one gets worse
- Early product threat alerts from KISA security notices
- Several recipients
- Webhook (Slack and Teams compatible)
- Korea vs abroad comparison
- DMARC report intake — who sends mail as your domain
Agency
Web agencies and MSPs
KRW 99,000+/mo · excl. VAT
30+ domains · 10 recipients · 10 brands watched · 5 staff seats
- Everything in Business, plus
- Client groups
- Staff seats
- White-label reports (your logo)
- Bulk checks + CSV and printable report
Annual billing: 2 months free · 30% off the first year paid annually (early bird)
Add-on — Brand protection KRW 199,000/mo · excl. VAT
Goes on any plan. We open nearly every new domain carrying your brand name, alert you as soon as one is seen posing as you, and prepare the evidence and report drafts.
- 5 brands watched (each extra brand KRW 30,000 a month)
- First screens opened per brand per day: 50 (10 by default)
- Instant impersonation alerts — within an hour, by mail and webhook, once we open a page and see it posing as your brand
- Impersonation evidence bundles — first-screen check, verdict reasons, registration and hosting data and observation hashes in one file
- Monthly brand report — found, confirmed, reported and time to takedown
- Customer-facing link check page — your customers check a link under your company name
- Brand impersonation alerts + report bundle (registrar and hosting contacts, observation hashes)
- Site clone detection — when a copy of your page opens on another domain (only copies we confirmed)
Reports come as drafts that you send; we track how long the takedown takes.
How it worksCompare plans
| Free | Starter | Business | Agency | |
|---|---|---|---|---|
| Domains | 1 | 3 | 10 | 30+ |
| Actively exploited vulnerability alerts within the hour | — | ✓ | ✓ | ✓ |
| New host alerts when an unseen subdomain appears | — | ✓ | ✓ | ✓ |
| Certificate issuance and delegation watch | — | ✓ | ✓ | ✓ |
| Site tampering watch | — | ✓ | ✓ | ✓ |
| Brand impersonation alerts + report bundle | — | ✓ | ✓ | ✓ |
| Site clone detection | — | ✓ | ✓ | ✓ |
| 90-day change history and CSV export | — | ✓ | ✓ | ✓ |
| Monthly executive report | — | — | ✓ | ✓ |
| Attack surface management | — | — | ✓ | ✓ |
| Vendor monitoring | — | — | ✓ | ✓ |
| Early product threat alerts from KISA security notices | — | — | ✓ | ✓ |
| Several recipients | — | — | ✓ | ✓ |
| Webhook | — | — | ✓ | ✓ |
| Korea vs abroad comparison | — | — | ✓ | ✓ |
| DMARC report intake | — | — | ✓ | ✓ |
| Client groups | — | — | — | ✓ |
| Staff seats | — | — | — | ✓ |
| White-label reports | — | — | — | ✓ |
| Bulk checks + CSV and printable report | — | — | — | ✓ |
AI agents — MCP and API Pro $12/mo
The MCP server with 35 public tools is free for personal, research and non-commercial use. From November 8, 2026, commercial use in your company's work or product needs Pro (terms §4).
- Commercial use licencecoming
- 5x limits on every API and MCP call
- Infrastructure pivot: 100 rows (free key: 20)
- History API and pre-deploy gate work with a free key too
Institutions and the public sector
Institutional email accounts can use every feature of the case workspace and the Business monitoring plan free until December 31, 2026. Start with an institutional email →
An annual subsidy plan (KRW 480,000, a year of Business) through the Korean SME information security support programme is in preparation. Tell us below if you are interested.
White-label link check page
Banks, card issuers, telecoms and local governments give their customers a "is this text link real?" page under their own name (their official domains built in, their reporting channel in the result). Quoted separately.
Launch notice and enquiries
Get payment and launch news by email, or ask for a quote. You can also ask for a monitoring plan launch notice from your account page.
Questions
Can I use a paid plan now?
Once payments open. Until then use the free plan (1 domain) and ask to be notified. Institutional email accounts have the Business plan free until December 31, 2026.
What does the free plan include?
Daily change mail for 1 domain (certificate, DNS, security headers, registration, exposed admin pages) and a monthly summary. The diagnostic tools stay free without an account.
Can I watch someone else's domain?
No. Only domains you prove you own with a DNS TXT record. Brand impersonation watch likewise covers only brands whose official domain you verified.
Do you look inside my servers?
No. Only what anyone can see from outside. No attacks, no login attempts.
How does the one-month free trial work?
Starter (3 domains) is on for 30 days from sign-up. We take no payment details; afterwards you are back on Free (1 domain), and alerts continue for the first domain you added.