Metered on page views. Nothing else.
A page view is counted when our monitoring script is loaded on a page within the scope you configured and starts sending telemetry data. Blocked requests are never counted. Scripts, domains, vendors, alerts and users are unlimited on every plan.
I run the tag on
100,000
payment-page views a month
Above 1,000,000 payment-page views, pricing is custom. Talk to an expert.
Pro
$99
/month
Free
$0
Forever free. No credit card.
Start for free
1,000 page views a month
PCI DSS 6.4.3 and 11.6.1 dashboard
Unlimited domains, scripts and vendors
Script blocking and monitor-only mode
30-day script history retention
Evidence packs retained 18 months
Email alerts
Pro
14-DAY TRIAL
$99
/mo
14-day free trial, for up to 100,000 payment-page views a month.
Start the trial
100,000 payment-page views at $99/month
Overage at $0.0013 per page view
Annual billing: pay for 10 months, not 12
Everything in Free, plus:
30-day script history retention
Dependency graph and vendor load chain
Granular per-vendor permissions
Webhook alerts, to Slack, Jira or anywhere else
S3 log push, for your SIEM
Enterprise
Custom
For large estates and custom terms.
Talk to an expert
Custom payment-page view limits
99.9% uptime SLA
90-day script history retention
Evidence packs retained 18 months
SSO and multi-team organisation layer
Priority support under 4 business hours
How much does script monitoring cost?
Free for up to 1,000 page views a month, $99 a month for 100,000 payment-page views, up to $799 a month for 1,000,000 and beyond. If you’re over a million an enterprise plan makes more sense. Page views are the only metered unit, and a page view is counted when our monitoring script is loaded on a page within the scope you configured and starts sending telemetry data. Because PCI scope is your payment pages rather than your whole site, the number that matters is usually far smaller than your total traffic. You can restrict monitoring to the payment pages themselves, and that works for single-page applications too, where the checkout is a route rather than a separate document, so the rest of your site stays out of the count.
One metered unit
What is metered, and what is not
Metered
Unlimited
Page views on pages you run the tag on
Yes
Requests we blocked
Never counted
Scripts in the inventory
Unlimited
Domains and properties
Unlimited
Vendors and load chains
Unlimited
Alerts and blocking rules
Unlimited
Teams and users
Unlimited
Compare plans
Feature
Free
Pro
Enterprise
Page views per month
1,000
100,000 to 1,000,000
Custom
PCI DSS 6.4.3 and 11.6.1 dashboard
Script inventory and justifications
Header change detection
Script blocking and monitor-only mode
Weekly evidence pack
Script history retention
30 days
30 days
90 days
Evidence pack retention
18 months
18 months
18 months
Dependency graph and load chains
Per-vendor permissions
Email alerts
Webhook alerts, any destination
S3 log push, for SIEM
SSO and organisation layer
Uptime SLA
99.9%
Support
Email
Email, chat, Slack
Call, chat, email, Slack
Start on the free plan and watch your usage for a fortnight before choosing.
One first-party tag, added the way your stack already ships code. No DNS change and no CDN change, because your traffic is never routed anywhere.
FAQ
Frequently asked questions
This is the only thing you are billed on, so it is worth being exact. A page view is counted when our monitoring script is loaded on a page within the scope you configured and starts sending telemetry data. Pages outside that scope are neither monitored nor counted, so if you scope to your payment pages, only payment-page traffic is billed however much traffic the rest of the site carries. A request that we blocked is never counted as a page view. Scripts, domains, vendors, alerts, blocks, teams and users are unlimited on every plan.
It decides your bill as well as your scope. A payment page is any page where a cardholder enters, reviews or confirms card data: checkout forms, payment confirmation screens, stored-card management, and any page that embeds a payment iframe. You define the scope with selector rules, and only those page views count.
From your existing analytics. In GA4, filter Reports then Engagement then Pages and Screens by your /checkout, /payment or /cart URLs. That figure is a good proxy for payment-page views. If you are between plans, start free and watch the usage page for a fortnight.
You keep running, and you choose how to settle it. Overage is billed at $0.0013 per page view, or you upgrade to the tier that covers your actual volume, which is cheaper per view than paying overage on it. The service never stops either way, because a compliance control that switches off when you are busy is worse than useless. The usage page shows a projection for the period, so the decision comes before the invoice rather than after it.
No. The 6.4.3 and 11.6.1 dashboard is on every plan including free. Blocking and monitor-only mode are too. What paid plans add is retention, load chains, per-vendor permissions and alert destinations.
No, and this is worth checking with every vendor you evaluate. Per-domain pricing multiplies fast for anyone running several brands, several regions or a merchant estate, and it charges you for structure rather than usage. Domains are unlimited on every plan here, including the free one. Page views are the only metered unit.
No, and deliberately not. Charging per script punishes you for having an accurate inventory, which is the exact opposite of the behaviour a compliance control should encourage. Domains, scripts and vendors are unlimited on every plan.
Yes, 14 days. The free plan is permanent and separate: it does not expire and does not require a trial.
Two different retention periods, and the distinction matters. Raw script history is 30 days on Free and Pro, and 90 days on Enterprise. Generated evidence packs are retained 18 months, because assessments look backwards and the pack is the artefact that has to survive.
Yes. Pro can be billed monthly or annually, and paying annually costs 10 months instead of 12, so two months are free. Enterprise supports custom terms, ACH and bank transfer.
Yes, above 500,000. Up to 500,000 payment-page views the plan scales at $1.00 per 1,000, so 500,000 is $499. Above that the rate falls to $0.60 per 1,000, which is why 1,000,000 is $799 rather than $999. Above 1,000,000 the plan is custom, and the rate keeps moving in your favour.
Yes. Non-profits are on the $99/month plan. Get in touch to cap your bill, and to show you are a recognised non-profit. If you are in education, ask.
Start free, and see your real page-view number.
1,000 page views a month, forever, with both PCI requirements included. No credit card.
Free forever plan. No credit card.