Simple, transparent pricing.

Absolutely. You can upgrade or downgrade your plan at any time from your dashboard. When upgrading, you only pay the prorated difference for the rest of your billing period. Downgrades take effect at the start of the next billing cycle — you keep your current plan's features until then.

We accept all major credit and debit cards including Visa, Mastercard, American Express, and Discover through our secure payment partner Stripe. All transactions are encrypted with 256-bit SSL and we never store your card details on our servers.

The Free plan is free forever — no trial needed, no credit card required. You can scan any domain instantly and see your security score. For paid plans, we offer a 14-day money-back guarantee. If you're not completely satisfied within the first 14 days, contact us and we'll issue a full refund, no questions asked.

Yes! Each plan includes a set number of domains (Starter: 1, Business: 5, Enterprise: 25). If you need more, additional domains can be added at $8/domain/month. Enterprise customers can request custom domain limits to fit their infrastructure.

Yes! Save 20% with annual billing. Starter drops to $15/mo, Business to $39/mo, and Enterprise to $159/mo when billed annually. You can switch between monthly and annual billing at any time from the pricing toggle above.

We'll send you a notification when you're approaching your domain limit. You can either upgrade to a higher plan for more domains, add extra domains individually, or remove unused domains from monitoring. Your existing monitoring will never be interrupted.

The Free plan lets you scan any domain on-demand and get a full security score with a grade (A-F). It covers email security (SPF, DKIM, DMARC, MX, MTA-STS, DNSSEC) and SSL/TLS certificate analysis. You don't get automated daily scans, real-time alerts, or auto-fix features — those are part of paid plans.

Heurys can automatically fix certain DNS-based security issues with a single click. If you connect your DNS provider (e.g., Cloudflare), we can add or update records like SPF, DKIM, and DMARC directly — no manual DNS editing required. The auto-fix feature is available on Starter plans and above.

Security is our top priority. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We use isolated infrastructure, implement strict access controls, and never share your data with third parties. Our scanning engine only reads publicly available DNS records — we never access your email content or internal systems.

Yes, you can cancel anytime from your dashboard or through the Stripe billing portal. When you cancel, your paid features remain active until the end of your current billing period. After that, your account automatically reverts to the Free plan — your data and scan history are preserved.

Yes! We offer special pricing for registered nonprofits, educational institutions, and early-stage startups. Contact us at hello@heurys.com with your organization details and we'll set up a discounted plan for you.

Business includes similar domain detection, brand protection dashboard, compliance scanning (GDPR, WCAG), and up to 5 domains. Enterprise adds takedown report generator, domain ownership verification (Shield), public verification API, dark web monitoring, threat enrichment, API access, SSO/SAML, white-label reports, dedicated account management, and up to 25 domains with custom SLAs.