Pricing
Priced on the domains you keep under watch and how often they are checked. Every plan starts with a 7-day trial — no card up front — and you can cancel from the billing portal at any time.
Starter
One domain, watched weekly, with reports you can hand to a client or an auditor.
- 1 verified domain
- 25 scans per month
- Weekly scheduled scans
- Change alerts & weekly digest
- PDF reports
- 2 team seats
Growth
Daily coverage across a real estate, with unlimited scans while you fix things.
- 5 verified domains
- Unlimited scans
- Daily scheduled scans
- Change alerts & weekly digest
- Lookalike domain monitoring
- 10 team seats
- PDF reports
Enterprise
Unlimited domains, SSO, and a signed scanning agreement. For larger estates.
- Unlimited verified domains
- Unlimited scans
- Daily scheduled scans
- Unlimited team seats
- SSO / SAML
- Signed authorization-to-scan agreement
- Dedicated support
Starter
One domain, watched weekly, with reports you can hand to a client or an auditor.
- 1 verified domain
- 25 scans per month
- Weekly scheduled scans
- Change alerts & weekly digest
- PDF reports
- 2 team seats
Growth
Daily coverage across a real estate, with unlimited scans while you fix things.
- 5 verified domains
- Unlimited scans
- Daily scheduled scans
- Change alerts & weekly digest
- Lookalike domain monitoring
- 10 team seats
- PDF reports
Enterprise
Unlimited domains, SSO, and a signed scanning agreement. For larger estates.
- Unlimited verified domains
- Unlimited scans
- Daily scheduled scans
- Unlimited team seats
- SSO / SAML
- Signed authorization-to-scan agreement
- Dedicated support
Enterprise adds a countersigned authorization-to-scan agreement if your security team needs one on file.
What every plan includes
| Plan | Domains | Scans / month | Scheduled | Seats | Lookalikes |
|---|---|---|---|---|---|
| Starter | 1 | 25 | weekly | 2 | — |
| Growth | 5 | unlimited | daily | 10 | Yes |
| Enterprise | unlimited | unlimited | daily | unlimited | Yes |
All plans include change detection, the weekly digest, critical-change alerts, PDF reports and the compliance evidence pack.
Pricing questions
Does the trial require a credit card?
No. Every plan starts with a 7-day free trial and no card is required to begin. You only add a payment method when you decide to keep the service. PDF reports generated during the trial carry a trial watermark; subscribing removes it.
What counts as a domain?
A registrable domain and everything under it. Subdomains that Bastion discovers through certificate transparency monitoring are covered by the parent domain — they do not consume extra domain slots.
Can I change or cancel my plan later?
Yes. Upgrades, downgrades and cancellation are all self-serve from the billing portal, and cancellation takes effect at the end of the paid period. Your scan history stays readable even without an active plan.
Do all plans include PDF reports and alerts?
Yes. Change detection, the weekly digest, critical-change alerts, PDF reports and the compliance evidence pack are included on every plan — plans differ on domains watched, scan frequency, scheduled scanning and seats, not on core features.