Plans & Billing

Two ways to buy

Shieldome offers two business models. You can use one, the other, or both simultaneously on the same account.

Token Packs

A token pack is a one-time purchase. Each completed scan costs 1 token. You can scan any URL — not just domains you own.

• Tokens are added to your account immediately after payment is confirmed.
• Failed or errored scans do not deduct a token.
• Your token balance is shown in the sidebar of the dashboard.

What every token scan includes

• OWASP Top 10 (2021) — broken access control, injection, misconfigurations, auth failures, and more
• Port & service scan — TCP connect scan across top 20 ports; flags exposed databases, RDP, Redis, and other dangerous services
• CVE detection — detects software versions from HTTP headers and page markup, then cross-references the NIST NVD database for known vulnerabilities
• Subdomain & attack surface mapping — passive discovery via certificate transparency logs (crt.sh) and DNS probing for common subdomains
• Performance metrics — DNS lookup, TTFB, page size, caching, HTTP/2, compression
• PDF, DOCX, SARIF, CSV exports

Token pack prices

Token expiry

Tokens expire 12 months from your most recent purchase. Buying a new pack resets the expiry clock for your entire balance.

Free tier

Every new account receives 1 free scan token upon verifying their email address. No credit card required.

How to buy tokens

1. Go to Account → Tokens & Billing, or visit the pricing page.
2. Click Token Packs tab, select a pack, and complete payment.
3. Tokens are credited to your account instantly.

SaaS Monitoring

SaaS Monitoring is a monthly subscription. Register your domains once — Shieldome scans them automatically on a fixed schedule and emails you when new vulnerabilities appear. Monitored-domain scans do not consume tokens.

Every automatic SaaS scan runs the full suite: OWASP checks, port scan, CVE detection, and subdomain discovery — the same depth as a manual scan.

Plans

Monitored domains

• Only domains you own may be registered.
• Domains are stored without the scheme (e.g. example.com). You supply the full URL when registering.
• Each automatic scan updates the domain's last-scan date, security score, and trend graph.

Alerts and integrations

• All plans — email alert when a new HIGH or CRITICAL finding is detected, or when your score drops.
• Pro & Agency — Slack and Jira integrations.
• Agency — white-label PDF reports with your branding + priority support.

How to subscribe

1. Go to Account → Tokens & Billing.
2. Click SaaS Monitoring tab, select a plan, and complete payment.
3. Your subscription activates immediately. Go to Account → Monitored Domains to register your first domain.

Cancellation

Cancel anytime from Account → Monitored Domains → Manage subscription. Your subscription stays active until the end of the current billing period.

Full feature comparison

Custom volume pricing

Need more than 100 tokens, more than 20 monitored domains, or a custom arrangement for your team? Contact us.

Payment history & invoices

Your full payment history and downloadable PDF invoices are available under Account → Tokens & Billing → Payment history.