Threat Intelligence API Pricing

Simple credit-based pricing. No hidden fees. No sales calls.

Tier 0

Free

75 credits (one-time)
10 requests/minute
1 API key
Lookup API access
Community support

Tier 1

$9/month

1,000 credits/month
100 requests/minute
1 API key
Lookup API access
Email support

Tier 2

$29/month

10,000 credits/month
200 requests/minute
1 API key
Lookup API access
Behavior Feeds (500/page)
Priority email support

Tier 3

$59/month

100,000 credits/month
500 requests/minute
1 API key
Lookup API access
Behavior Feeds (2,000/page)
Priority support
Usage analytics

Tier 4

$99/month

1,000,000 credits/month
1,000 requests/minute
50 API keys
Lookup API access
Behavior Feeds (5,000/page)
24/7 support
Advanced analytics
99.9% SLA

Tier 5

$499/month

Unlimited credits
Unlimited requests
Unlimited API keys
Lookup API access
Behavior Feeds (unlimited)
24/7 dedicated support
Advanced analytics
99.99% SLA
Custom integrations

How Credits Work

Pay only for the data you receive. Credits are charged based on enrichments returned. Credits never expire. Use them at your own pace.

1 creditPer enrichment field (geo, ASN, WHOIS, etc.)

2 creditsThreat intel enrichment (tags, sources, confidence)

1 credit minIP/Domain/Hash lookup (minimum charge)

1 credit baseBehavior feed request

+1 creditPer 100 indicators in feed response

Example500 indicators = 6 credits (1 + 5)

Credit Calculator

Select enrichment fields to estimate your credit usage per lookup:

API Request

curl -H "X-API-Key: YOUR_API_KEY" \
  "https://api.portsix.io/v1/ip/185.220.101.45"

Select Enrichment Data

Each enrichment costs 1 credit. Uncheck to exclude from response.

Geolocation1 credit

Country, city, coordinates, timezone

ASN Information1 credit

Autonomous System Number and organization

Cloud Providernull1 credit0 credits

AWS, GCP, Azure detection

Anonymization1 credit

TOR, VPN, proxy detection

Reverse DNS1 credit

PTR record hostname lookup

WHOIS1 credit

IP registration and network info

Threat Intelligence2 credits

Threat tags, sources, confidence scores

Max Credits8

Null values (no charge)-1

Total Credits7

Example Response

{
  "success": true,
  "data": {
    "observable_id": 3664181,
    "type": "ipv4",
    "value": "185.220.101.45",
    "status": "active",
    "risk_score": 43.74,
    "enriched_at": "2026-01-03T21:26:26Z",
    "geo": {
      "country_code": "DE",
      "country_name": "Germany",
      "city": "Berlin",
      "state_province": "State of Berlin",
      "latitude": 52.52,
      "longitude": 13.405,
      "timezone": "Europe/Berlin"
    },
    "asn": {
      "asn": 60729,
      "org_name": "TORSERVERS-NET",
      "country_code": "DE"
    },
    "cloud": null,
    "anonymization": {
      "type": "tor-exit",
      "provider": "TOR",
      "confidence": 1
    },
    "rdns": {
      "hostname": "tor-exit-45.for-privacy.net",
      "provider": "1.1.1.1"
    },
    "whois": {
      "rir": "RIPE",
      "whois_server": "whois.ripe.net"
    },
    "threat_intel": {
      "tags": [
        {
          "name": "Anon: Tor"
        },
        {
          "name": "Brute Force"
        },
        {
          "name": "Protocol: Ssh"
        }
      ],
      "sources": [
        "alienvault_otx",
        "greensnow-blocklist"
      ],
      "first_seen": "2025-12-01T03:14:09Z",
      "last_seen": "2025-12-30T06:44:02Z",
      "confidence": 90
    },
    "relationships": [
      {
        "direction": "outgoing",
        "relationship_type": "resolves_to",
        "target_type": "domain",
        "target_value": "for-privacy.net",
        "confidence": 0.85
      }
    ]
  },
  "meta": {
    "credits_cost": 7,
    "credits_remaining": 9993,
    "execution_time_ms": 2515
  }
}

Feature Comparison

Feature	Tier 0	Tier 1	Tier 2	Tier 3	Tier 4	Tier 5
Credits	75	1,000/mo	10,000/mo	100,000/mo	1,000,000/mo	Unlimited
Rate Limit	10/min	100/min	200/min	500/min	1,000/min	Unlimited
API Keys	1	1	1	1	50	Unlimited
Lookup API	✓	✓	✓	✓	✓	✓
Behavior Feeds	—	—	✓	✓	✓	✓
Max Results/Page	—	—	500	2,000	5,000	Unlimited
Usage Analytics	—	Basic	Basic	Advanced	Advanced	Advanced
Support	Community	Email	Priority Email	Priority	24/7	24/7 Dedicated
SLA	—	—	—	—	99.9%	99.99%
Custom Integrations	—	—	—	—	—	✓

Frequently Asked Questions

How do credits work?

You pay for what you get. Lookups charge 1 credit per enrichment field returned (2 credits for threat intel). If we don't have data, you don't pay. Feeds charge 1 base credit + 1 per 100 indicators. Credits never expire.

What happens if I run out of credits?

API requests will return a 429 status code when credits are exhausted. You can purchase additional credit packs or upgrade your plan at any time. No overage charges - you stay in control.

Can I change plans?

Yes, upgrade or downgrade anytime. Changes take effect immediately. Unused credits roll over when upgrading. Straightforward, no sales calls required.

Do you offer custom plans?

No custom plans. Choose from our five standard tiers. If you need more than Unlimited, you probably need to self-host. We keep it simple.

What payment methods do you accept?

Credit cards and ACH. Automatic billing, cancel anytime. No contracts, no commitments.

Is there a free tier?

Yes. Tier 0 gives you 75 credits free. Full access to all endpoints. No credit card required to sign up.

What is your refund policy?

30-day money-back guarantee. Not happy? Get a full refund. Simple as that.

Can I self-host this?

Not currently. This is a managed service. If you need on-premise deployment, contact us directly - but that's a different product entirely.