ThreatPort Paid Plan: What It Includes and What It Costs

Updated

ThreatPort's paid plan costs 50 USD per month per domain. According to the site's own description, it adds continuous monitoring, deeper external attack surface analysis, AI pentest output, and PDF-ready reporting on top of the free domain scan. That price and feature set make it a fit for lean security teams that want recurring evidence rather than a one-time assessment — but it is priced per domain, so the total scales with how many domains you need to cover.

What the paid plan includes

Based on the platform description, the paid tier covers:

  • Continuous monitoring — the external attack surface is checked on an ongoing basis instead of only when you run a scan.
  • Deeper external attack surface analysis — more thorough coverage than the free scan.
  • AI pentest output — AI-assisted pentest reporting, described as part of the self-serve workflow.
  • PDF-ready reporting — output intended for remediation tracking, leadership updates, and compliance preparation.

These sit on top of the capabilities the platform advertises across its tiers: external attack surface management, cyber threat intelligence, CVE mapping, DNS and email security checks (including SPF and DMARC), SSL monitoring, and open port visibility.

What you get before paying

ThreatPort offers a free domain scan as the entry point. Per the site, that scan can surface:

  • Subdomains
  • Exposed services
  • Weak headers
  • Missing SPF or DMARC records
  • Certificate issues
  • Technologies that may be linked to known vulnerabilities

The platform is agentless and requires no installation, so the free scan is a way to see real findings on your own domain before deciding whether the recurring monitoring is worth 50 USD per month.

How to decide whether it's worth it

The paid plan is priced per domain per month, so the practical question is how many domains you need under continuous watch and whether you need the reporting output.

If your situation is… The paid plan is…
One or a few domains, need ongoing visibility A low per-domain cost relative to manual assessments
Need PDF reports for leadership or compliance prep Directly relevant, since reporting is a listed paid feature
Only want a one-time look at exposure The free scan may be enough
Many domains across a large estate Cost multiplies per domain — budget accordingly

The site positions the product for IT managers, CISOs, CTOs, and lean security teams that want "practical security evidence without waiting for enterprise sales calls or expensive manual assessments." If that describes your team and you need recurring rather than one-off results, the 50 USD per domain per month is the number to plan around.

What to verify before buying

The description does not specify billing terms, contract length, or whether the price changes at volume. Check the pricing page directly for current terms, and confirm whether the domains you care about (including subdomains you don't yet know about) fall under a single domain charge or count separately. Running the free scan first on your primary domain is the cheapest way to judge whether the findings justify the recurring cost.