PRICING THAT STARTS AT ZERO
Free monitoring is the default, not a countdown. Install WebDecoy, keep detecting, and unlock the paid capability trial only when your installation is verified.
THE VALUE CLOCK
You begin on Free. No trial clock is running.
Your one-time 14-day paid-capability trial begins automatically.
Upgrade, or return to Free monitoring without losing detection.
CHOOSE YOUR EVENT ENVELOPE
Every tier keeps detection running. Paid plans add depth: longer history, threat enrichment, automation, and support.
START HERE
Continuous bot visibility for small sites, experiments, and anyone proving value before paying.
Start free Opens in a new tabMOST POPULAR
Real retention, enrichment basics, and automated responses for production sites.
Start with Free Opens in a new tabFOR GROWING TEAMS
Higher-volume detection, actor intelligence, and response automation across multiple properties.
Start with Free Opens in a new tabFOR PORTFOLIOS
Pooled volume, client-ready reporting, and protection across a whole portfolio of sites.
Start with Free Opens in a new tabNeed a bigger event envelope or a tailored rollout? Talk to us.
Stored-event limits are soft envelopes. When a plan reaches its monthly budget, collection degrades to sampling rather than breaking your site or blocking traffic.
| What you get | Free | Starter | Pro | Agency |
|---|---|---|---|---|
| Bot events saved each monthHow many detections WebDecoy keeps for search, reporting, and investigation. | 5,000 | 50,000 | 500,000 | 2,000,000 pooled |
| Properties coveredSites or apps you can protect in one workspace. | 1 | 3 | 10 | 25, then $8 / month each |
| How far back you can investigateThe time window available when you need to understand what a bot did. | Last 7 days | Last 90 days | Last 12 months | Last 12 months |
| Detection coverageHoneypots, browser analysis, and edge sensors continue identifying automated traffic. | Included | Included | Included | Included |
| IP and network contextAdds provider, hosting, proxy, VPN, abuse, and location signals to a detection. | Not included | Basic | Full | Full |
| Automatic blocking and responseTurn approved detections into expiring WAF rules and other response actions. | Manual review | Basic actions | Full enforcement | Full enforcement |
| Track one bot across changing IPsConnects rotating addresses and user agents back to a persistent actor identity. | Basic signals | Basic signals | Persistent identity | Persistent identity |
| DecoysDecoy links and API honeypot endpoints you can create across your properties. | 5 | 15 | 100 | Unlimited |
| AI assistant access (MCP)Connect Claude, ChatGPT, Codex or another MCP client to install WebDecoy and ask about your sites. Read-only by default. | Included | Included | Included | Included |
| Help when you need itThe response level available when setup or an investigation needs assistance. | Documentation | Email support | Priority support | Priority support |
Yes. New workspaces start on Free, and Free remains available after a trial or cancellation. It includes 5,000 stored events each month and seven days of detailed history.
Not when you create an account. It starts automatically after WebDecoy verifies your first real installation, so setup time does not consume the period meant for evaluating value.
You can choose a paid plan or return to Free. Your sensors continue detecting; paid history, enrichment, and automated response capabilities close until you upgrade.
WebDecoy fails softly. Detection admission moves to sampling instead of blocking traffic or risking your site. Upgrade to restore the larger stored-event envelope.
