Plans & limits.
| Features | Anonymous |
Free Free account |
Mlab Pro | Mlab Team | Mlab Enterprise |
|---|---|---|---|---|---|
| Create account | Get Pro | Get Team | Contact sales | ||
| Mlab Plans | |||||
| Pricing | free | free | 59€ / month First 2 months at 19.99€ |
149€ / month | On demand |
| Seat | 1 | 1 | 1 | Unlimited | Unlimited |
| API keys | 1 | 5 | 100 | 100 | |
| MCP Integration | |||||
| Monthly Reporting | |||||
| Access & Usage | |||||
| Account required | |||||
| Commercial usage | |||||
| Daily Scan Limits | |||||
| Domain analysis | 2 / day | 5 / day | 25 / day | 100 / day | As you go |
| IP analysis | 5 / day | 10 / day | 50 / day | 200 / day | As you go |
| File analysis | 1 / day | 3 / day | 20 / day | 80 / day | As you go |
| Crypto analysis | 3 / day | 10 / day | 30 / day | 100 / day | As you go |
| Instant Lookups | |||||
| Email intelligence | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Phone lookup | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| URL analysis | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| MAC address lookup | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Hash identifier | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| History & Storage | |||||
| Scan history | Short-term | 90 days | 12 months | Per contract | |
| File retention | 48h | 48h | 48h | 48h | 48h |
| Analyst review | On, opt-out | On, opt-out | Off by default | Off by default | Off by default |
| Bookmarks | |||||
| Web Security | |||||
| Header Intel | |||||
| Preview | |||||
| RedKit, Security Audits | |||||
|
RedKit scans
One quota shared by Web and IP range scans
|
1 lifetime | 5 / month | 20 / month | Unlimited | |
| PDF report export | |||||
| Mail Security | |||||
| EML Parser | |||||
| Security Analyzer | |||||
| Your Infrastructure | |||||
| Infra Manager | |||||
| SSO for self-hosted apps | |||||
| hunt.mlab.sh, Threat Hunting | |||||
| Yara builder | |||||
| Sigma builder | |||||
| Mitre Coverage | |||||
| Create account | Get Pro | Get Team | Contact sales | ||
Which plan fits your volume?
Enter what you expect to run on a busy day. Calls from an AI assistant through the MCP server or the API count against the same quotas as the web app.
Email, phone, URL, MAC and hash lookups are unlimited on every plan and are not part of the estimate.
These plans apply across mlab.sh, vuln.mlab.sh and risk.mlab.sh. The self-hosted platforms, tprm.mlab.sh and ir.mlab.sh, each have their own license. For the full continuous-monitoring and alerting breakdown, see the vuln.mlab.sh plans.
For organisations that do not buy with a credit card.
Pro and Team are self-serve. Companies and public bodies usually need a quote, a purchase order and an invoice, plus a clear answer on where the data lives. Both are handled here, on the same platform, with no separate edition to maintain.
Security teams, SOC and MSSP
Volume past the Team quotas and the controls a security team is audited on. We size the plan around how you work, not the other way round.
- Quotas sized to your volumeScans billed as you go, no daily ceiling to plan around.
- Unlimited seats, real rolesOwner, Admin, Member and Viewer, with an audit log of every admin action.
- Single sign-on and domain joinColleagues on your verified domain land in your organisation, not in a new one.
- Contract and invoicingAnnual contract, purchase order, bank transfer. Covers mlab, IR and TPRM in one agreement.
Local authorities, agencies and law enforcement
Know what your organisation exposes to the internet before an attacker does, and give investigators a fast way to qualify an indicator, a phishing SMS or a suspicious file.
- External exposure of your estateDomains, subdomains, mail security and certificates, with a PDF report you can hand to your hierarchy.
- Investigation supportIP, URL, phone, email, hash and crypto lookups from one place, for triage and case files.
- Public procurement friendlyQuote, purchase order and invoice. No card, no automatic renewal.
- Proof of concept firstTry it on your own perimeter before committing budget.
- A detection aid, not a certified auditmlab helps you find and track exposures. It does not replace a security audit by a PASSI-qualified provider, and it is not SecNumCloud-qualified.
- Hosted in France on infrastructure operated by Cyber Dream
- French company, GDPR data processing agreement on request
- Direct line to the people who build the platform