Choosing the Right Plan: Scan Frequency, Domains, and Coverage
Not every site needs a five-minute scan interval. Here's how to match your plan to your real risk profile without overpaying.
The three levers that define a plan are scan frequency, number of monitored domains, and depth of coverage. The right mix depends on how fast an undetected change would hurt you.
High-traffic checkout pages justify the shortest interval. A skimmer that lives for an hour on a busy payment page can harvest thousands of cards, so for revenue-critical paths the five-minute tier pays for itself.
Lower-risk surfaces — marketing sites, documentation, internal tools — are fine on a longer interval. You still get baseline diffing and blocklist correlation, just checked less often, which keeps cost proportional to exposure.
Domain count scales with your estate. Add every property that handles user input or payments first; informational subdomains can follow. You can change tiers at any time, so start where your risk is highest and expand as you see value.