Two products. Pick one or both.
Brand Protection finds lookalike domains. Email Security gets you to DMARC enforcement. Every price is public, and both start free.
Brand Protection
Finds lookalike and typosquat domains targeting your brand, scores the risk, and gives you the evidence and reports to take them down.
Free
Try it on one domain. No credit card.
1 domain
- Lookalike, typosquat & homoglyph detection
- Risk scoring across registrar, DNS, content & visual signals
- Daily scans
- 5 visible alerts per domain
- Email alerts
- Abuse-report & phishing takedown tools
Starter
Hourly scans, more domains, REST API.
5 domains
- Everything in Free
- Hourly scans
- Certificate Transparency (CT) log monitoring
- Threat-intelligence feeds
- Unlimited alerts, Slack & webhooks
- REST API access
Pro
RecommendedSite screenshots, visual change detection.
20 domains
- Everything in Starter
- Site screenshots + 30-shot history
- Daily visual change detection
- Tracked pages: 5 per domain
- CDN + domain availability checks
- Priority support
Business
Team access, audit log, compliance-ready.
100 domains
- Everything in Pro
- Tracked pages: 20 per domain
- Team access (up to 10 members)
- Audit log export
- Compliance-ready: NIS 2, DORA, HIPAA, PCI DSS 4.0
| Feature | Free | Starter | Pro | Business |
|---|---|---|---|---|
| Coverage | ||||
| Monitored domains | 1 | 5 | 20 | 100 |
| Visible alerts per domain | 5 | Unlimited | Unlimited | Unlimited |
| Scan frequency | Daily scans | Hourly scans | Hourly scans | Hourly scans |
| Detection | ||||
| Lookalike, typosquat and homoglyph detection | Yes | Yes | Yes | Yes |
| Risk scoring across registrar, DNS, content and visual signals | Yes | Yes | Yes | Yes |
| Certificate Transparency (CT) log monitoring | No | Yes | Yes | Yes |
| Threat-intelligence feeds (URLhaus, Google Safe Browsing, PhishTank, VirusTotal) | No | Yes | Yes | Yes |
| CDN detection | No | No | Yes | Yes |
| Domain availability and pricing checks | No | No | Yes | Yes |
| Visual evidence | ||||
| Site screenshots, up to 30 per alert | No | No | Yes | Yes |
| Daily visual change detection | No | No | Yes | Yes |
| Tracked pages per domain (login, checkout, account) | No | No | 5 | 20 |
| Alerts and response | ||||
| Email alerts | Yes | Yes | Yes | Yes |
| Slack and webhook alerts | No | Yes | Yes | Yes |
| Abuse-report and takedown tools | Yes | Yes | Yes | Yes |
| Access and support | ||||
| REST API | No | Yes | Yes | Yes |
| Team access | No | No | No | Up to 10 members |
| Audit log export | No | No | No | Yes |
| Priority support | No | No | Yes | Yes |
Email Security
Reads your DMARC reports, shows who sends as you, and walks you to p=reject. A standalone product: no Brand Protection plan needed.
Free
For trying it on one domain.
1 domain
- DMARC, SPF, DKIM, MTA-STS, TLS-RPT & BIMI monitoring
- Who's sending as you, with ESP attribution
- Enforcement wizard + known senders
- SPF record builder + flattener
- 7 days of report history
Starter
For small teams with multiple domains.
5 domains
- Everything in Free
- Hosted MTA-STS policy (opt-in)
- Full forensic history + 365-day reports
- Anomaly detection (4 classes) + alerts
- AI DMARC root-cause analysis
Pro
RecommendedFor mid-size companies with many sending domains.
20 domains
- Everything in Starter
- Higher-volume report ingest
Business
For enterprises and MSPs at scale.
100 domains
- Everything in Pro
- Highest-volume report ingest
- Built for MSPs & high-volume senders
| Feature | Free | Starter | Pro | Business |
|---|---|---|---|---|
| Coverage | ||||
| Monitored domains | 1 | 5 | 20 | 100 |
| Monitoring | ||||
| DMARC, SPF and DKIM monitoring | Yes | Yes | Yes | Yes |
| MTA-STS, TLS-RPT and BIMI monitoring | Yes | Yes | Yes | Yes |
| Hosted MTA-STS policy (opt-in) | No | Yes | Yes | Yes |
| Posture and enforcement | ||||
| Enforcement wizard (p=none to p=reject) | Yes | Yes | Yes | Yes |
| Known senders and ESP attribution | Yes | Yes | Yes | Yes |
| SPF record builder and flattener | Yes | Yes | Yes | Yes |
| Reports and retention | ||||
| Aggregate and forensic (RUF) reports | Yes | Yes | Yes | Yes |
| Report and known-sender history | 7 days | 365 days | 365 days | 365 days |
| Forensic report history | 7 days | Full | Full | Full |
| Detection and AI | ||||
| Anomaly detection (4 classes) and alerts | No | Yes | Yes | Yes |
| AI DMARC root-cause analysis | No | Yes | Yes | Yes |
Estimate for your domain count
Set how many domains you protect and which products you want. We pick the cheapest tier that fits and add them up honestly.
Helps you meet email-security clauses in NIS 2, DORA, HIPAA and PCI DSS 4.0
-
NIS 2 playbook
Article 21: cryptography and authentication for electronic communications.
-
DORA playbook
Chapter II: detecting anomalous activity and third-party impersonation.
-
HIPAA Security Rule
45 CFR 164.308: guarding against phishing campaigns aimed at clinical staff.
-
PCI DSS 4.0
Requirement 5.4.1: automated mechanisms that detect phishing attacks.
PhishFence is a monitoring tool, not a certification body. Your compliance posture depends on how you operate it alongside the rest of your controls.
Frequently asked questions
Plans
How many domains can each plan monitor?
Is the Free plan really free?
What does '5 visible alerts' mean on the Free plan?
Does the Business plan include Email Security?
How is Email Security priced?
Billing
Do you require a credit card to start?
Do you offer annual pricing?
What payment methods do you accept?
Can I cancel anytime?
Data
What happens to my data if I cancel?
Start free on either product
Free covers 1 domain on each product, with no time limit. Upgrade when you add domains.
Payments processed by Stripe · Cancel anytime · No credit card for Free