Plans & limits.

On the result page of any domain, and every month for the domains you have proven.

• Exposure check per domainA risk score, how many accounts and passwords leaked for your people and your users, and how many came from infostealers.
• Free: 1 domain a monthPro and Team: 25. Enterprise: unlimited. Opening a domain again that month is free.
• Monthly recapPro, Team and Enterprise: last month's new leaks on all your proven domains, on your infrastructure page.
• Totals onlyNo account names, no passwords: those are in the Stealed platform.

We are a Stealed partner and reseller: one contact, one invoice, set up with you.

• Every leaked accountEmployees, customers and partners, the sites they leaked from, and your keywords spotted in leaks.
• Alerts where you workEmail, Slack, Teams, signed webhook or SIEM, within the hour of publication.
• Priced on quoteFrom the size of your organisation and the number of domains to monitor. MSSP: one platform for all your clients.
• A demo on your own domainsSee what already leaked before you decide.

Volume past the Team quotas and the controls a security team is audited on. We size the plan around how you work, not the other way round.

• Quotas sized to your volumeScans billed as you go, no daily ceiling to plan around.
• 20 workspacesInvestigate memory dumps and clusters on your own hosts, through an agent that only connects out. Team includes 1.
• Unlimited seats, real rolesOwner, Admin, Member and Viewer, with an audit log of every admin action.
• Single sign-on and domain joinColleagues on your verified domain land in your organisation, not in a new one.
• Contract and invoicingAnnual contract, purchase order, bank transfer. Covers mlab, IR and TPRM in one agreement.
• Proof of concept firstRun it on your own data and workflows before you sign. Start a proof of concept.

Know what your organisation exposes to the internet before an attacker does, and give investigators a fast way to qualify an indicator, a phishing SMS or a suspicious file.

• External exposure of your estateDomains, subdomains, mail security and certificates, with a PDF report you can hand to your hierarchy.
• Investigation supportIP, URL, phone, email, hash and crypto lookups from one place, for triage and case files.
• Public procurement friendlyQuote, purchase order and invoice. No card, no automatic renewal.
• Proof of concept firstTry it on your own perimeter before committing budget.
• A detection aid, not a certified auditmlab helps you find and track exposures. It does not replace a security audit by a PASSI-qualified provider, and it is not SecNumCloud-qualified.

Verify a school email in your account settings. Any .edu address works instantly, plus a growing list of supported schools.

For early-stage startups: the whole mlab.sh stack, onboarding and support included, paid in equity instead of cash.