HorasEye pricing
Pay for cybersecurity certainty, not noise
Every HorasEye plan includes high-confidence honeytoken detections for security teams. Upgrade when you need more decoys, AWS IAM honeytokens, or AI-guided incident response. No agents on your infrastructure required.
Preparing for SOC 2 or ISO 27001? Placement Score and the detection pipeline heartbeat give auditors coverage and uptime numbers, and evidence packs help you hand over incident artifacts. Start Free, or start a 14-day trial. We set the length and plan with you.
Pro
For a single operator deploying decoys without inviting a team.
€99
per month
25 active honeytokens
Get ProTeam
For security teams that need seats, SIEM hooks, industry decoy packs, and advanced cloud decoys.
€249
per month
100 active honeytokens
Get TeamEnterprise
Unlimited decoys, custom limits, and hands-on support.
Contact sales
Unlimited honeytokens
Contact salesCompare plans
Free includes email alerts and core honeytoken types. Pro is for a single operator: more decoys plus Slack and Discord. Team adds seats, industry decoy packs, custom signed webhooks, SIEM hooks, Bedrock, and Azure. Enterprise is unlimited with the audit log.
| Feature | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
Active honeytokens | 5 | 25 | 100 | Unlimited |
DNS & HTTP callbacks Network tripwires that fire on lookup or beacon. | Included | Included | Included | Included |
Web image & clone tripwire Custom image URLs and JavaScript embeds that detect cloning or hotlinking. | Included | Included | Included | Included |
Document & file lures PDF, Word, Excel, QR codes, and MySQL dump decoys. | Included | Included | Included | Included |
Deployment guides Step-by-step playbooks for planting, testing, and operating every honeytoken type. | Not included | Included | Included | Included |
Slack / API-style tokens | Included | Included | Included | Included |
GitHub PAT & supply-chain tokens Decoy GitHub PATs, npm, PyPI, Docker registry, and Stripe live keys. | Included | Included | Included | Included |
Real AWS IAM honeytokens Hosted by HorasEye. CloudTrail alerts when keys are used. | Not included | Included (3) | Included (10) | Included (Unlimited) |
AWS S3 bucket honeytokens Private decoy buckets. Alerts when accessed or enumerated. | Not included | Included (2) | Included (5) | Included (Unlimited) |
AWS Bedrock API key honeytokens Decoy AI/ML API keys. Alerts on usage; model invocation blocked. | Not included | Not included | Included (3) | Included (Unlimited) |
Azure login certificate honeytokens Entra ID service principal + cert. Alerts on az login with decoy creds. | Not included | Not included | Included (3) | Included (Unlimited) |
Zero false positives on triggers | Included | Included | Included | Included |
Email alerts Notify recipients when a honeytoken fires. | Included | Included | Included | Included |
Slack & Discord alerts Post honeytoken alerts to Slack or Discord channels. | Not included | Included | Included | Included |
Attacker intel Anonymized cross-tenant IP, country, and scanner rollups from HorasEye honeytoken hits. | Country teaser | Included | Included | Included |
Placement Score 0-100 decoy coverage score across network, cloud, documents, and secrets. Useful evidence for SOC 2 / ISO 27001 detective-control discussions. | Included | Included | Included | Included |
Pipeline heartbeat Recurring public DNS health checks with uptime and checks-passed counts that prove detection stayed live. | Included | Included | Included | Included |
Evidence pack Per-alert PDF for IR and audit handoff (SOC 2 / ISO evidence). Team and above can download ZIP with PDF plus raw JSON. | Not included | PDF + ZIP | PDF + ZIP | |
Industry decoy packs Finance, SaaS, Healthcare, and DevOps kits with named tokens, placement tags, and plant paths. Pick which decoys to create. | Not included | Not included | Included | Included |
Custom signed webhooks HMAC-signed JSON for Tines, SOAR, SIEM ingest, or your own endpoint. | Not included | Not included | Included | Included |
SIEM & integration hooks PagerDuty, Splunk HEC, and Datadog. | Not included | Not included | Included | Included |
Team members & RBAC Invite admins and members with role-based access. | Not included | Not included | Included | Included |
HorasEye REST API Programmatic read access to alerts, tokens, triggers, and exports. Create keys under API settings. | Not included | Not included | Included | Included |
Audit log Exportable tenant activity history for compliance and forensics. | Not included | Not included | Not included | Included |
AI incident briefs Plain-English analysis and recommended next steps per alert. Included on Team and Enterprise. Free and Pro can enable it as a €49/mo add-on. | Add-on (€49/mo) | Add-on (€49/mo) | Included | Included |
Self-serve deployment First decoy live in about two minutes. | Included | Included | Included | Included |
Custom token quota | Not included | Not included | Not included | Available |
Priority support | Community | Dedicated |
Want a 14-day Pro or Team trial?
Tell us which plan you need and for how long. We enable it for your organization after a short review. Or start on Free and upgrade when you are ready.