Simple, honest pricing
Scan free. Pay once for monitoring. Scale up for multiple domains.
Free
$0
Check any domain instantly. No login needed.
- 3 domain scans per day
- SPF, DMARC & DKIM check
- Security grade (A–F)
- Issue list with severity
- Fix It wizard (copy-paste DNS)
- Domain monitoring
- PDF security report
- Email alerts
PhishScan Monitor
$8 one-time
We watch your domain and alert you the moment something breaks.
- Unlimited domain scans
- SPF, DMARC & DKIM check
- Security grade (A–F)
- Issue list with severity
- Fix It wizard (copy-paste DNS)
- Weekly monitoring (1 domain)
- Email alert if grade drops
- PDF security report
Single Domain Bundle
$10 one-time
PhishScan + DMARC Digest monitoring for one domain.
- Everything in PhishScan Monitor
- DMARC XML report analysis
- Suspicious sender detection
- DMARC monitoring (same domain)
- Email alert if policy weakens
- One key, both apps
- Save $3 vs buying separate
Agency Bundle
$18 / month
Both apps, unlimited domains. Built for agencies and IT teams.
- Unlimited domains monitored
- PhishScan + DMARC Digest
- Weekly re-scan all domains
- Email alert any domain drops
- PDF reports for client handoff
- AI-enhanced narratives
- One key, both apps
Already purchased? Go back to the app and click ★ Pro to enter your key.
Questions
How does monitoring work?
After purchasing, enter your key in the app and register your domain for monitoring. We re-scan it every week. If your security grade drops or a record goes missing, you get an email alert immediately so you can fix it before anyone exploits it.
What is "one-time" pricing?
You pay once and monitoring runs indefinitely. No subscription, no renewal, no surprise charges. The $8 and $10 tiers are a single payment for lifetime monitoring of one domain.
How does the Pro key work?
After purchasing you'll receive a unique key by email. Open the app, click the ★ Pro button in the top-right corner, and enter your key. No account creation needed — ever.
What does the bundle key unlock?
One key that unlocks Pro features in both PhishScan and DMARC Digest. Enter the same key in both apps.
Can I cancel the Agency Bundle?
Yes. Cancel through Gumroad anytime and your key stops working at the end of the billing period. No questions asked.
Is my data private?
Scans only read publicly available DNS records. PDFs are auto-deleted from our server after 1 hour. We never store your domain list or IP address. Privacy policy →