Beta pricing · Limited time offer

Options for every budget. No compromise on knowing your footprint.

Four plans along one path: identify what's exposed, detect what's real, protect by fixing it. You pay for the domains you protect, not the assets we find; discovered assets, identities and detections are uncapped on every plan.

01 Identify

Foundation

$298standard
$149 /mo AUD
Billed monthly.

1 domain · 3 users · 30-day history

Continuous external visibility for smaller organisations. See what an attacker sees.

Includes:

  • No caps on discovered assets or identities
  • Breach & infostealer credential monitoring
  • Infrastructure scanning
  • Brand & lookalike-domain monitoring
  • CVE / dependency scanning
  • AI triage summaries
  • Dark web intelligence (Limited)
  • External Exposure Report (summary)
01+ Identify, with Yeti

Foundation Plus

$698standard
$349 /mo AUD
Billed monthly.

1 domain · 3 users · 30-day history

Detect, for one domain. For a small business that wants Yeti's help fixing what it finds.

Everything in Foundation, plus:

  • Yeti confirms each finding and walks you through the fix
  • Email alerts when something changes
  • Full External Exposure Report
Recommended
02 Detect

Detect

$998standard
$499 /mo AUD
Billed monthly.

5 domains · 5 users · 3 VIP identities · 90-day history

Know what's real and how to fix it, across the whole organisation. Yeti writes the fix for the systems you run.

Everything in Foundation Plus, plus:

  • Yeti writes the scripts and commands for your systems
  • VIP identity monitoring
  • Priority support
03 Protect

Protect

$1,998standard
$999 /mo AUD
Billed monthly.

10 domains · 10 users · 10 VIP identities · 12-month history

Close exposures faster, with deeper intelligence on the threats facing your sector.

Everything in Detect, plus:

  • Dark web intelligence (Full), including ransomware leak sites
  • Threat Assessment for your sector & region
  • SIEM integration & API access
  • Trend reporting
Beta pricing. 50% off standard rates while Footprint is in beta. Sign up during the beta and your price is locked for your first 12 months. Prices in Australian dollars, exclusive of GST. Month-to-month. Pay annually and get two months free. Setup fees. A setup or maintenance fee may apply on Detect and Protect. Data stays in Sydney. No agents required. Need more? More than 10 domains, SSO/SAML, audit log or a custom SLA: talk to us.

Common questions

Something else? Ask us directly.

Why don't you limit assets or identities?
Footprint exists to find what you didn't know you had. Charging per asset would penalise you for the very discoveries you're paying for. You pay for the domains you protect. Every hostname, IP, cloud resource and staff identity we discover is monitored, counted and reported in your dashboard at no extra cost.
What counts as a detection?
A detection is a security finding Footprint discovers, such as a breached credential, exposed service, leaked secret or vulnerable dependency. Detections are unlimited on every plan. You are never charged more because you have more findings.
What does Yeti do?
Yeti is Footprint's AI remediation agent. On Foundation Plus it explains each finding, shows you how to confirm it's real, and gives step-by-step remediation guidance specific to the issue. On Detect it also writes the scripts and commands your team needs, for the systems you actually run. Yeti-generated commands are always presented for your review. Nothing runs on your systems without your team's approval.
Does Footprint use AI, and where does my data go?
Yes, in two places. Every plan includes AI triage summaries, which turn raw findings into plain-language explanations of what was found and why it matters. Foundation Plus and above include Yeti, our AI remediation agent, which confirms findings and writes the fix. All of it runs in Australia: the AI that reads your findings is hosted in AWS Sydney alongside your data, and nothing is sent offshore to produce a summary or a fix. Your findings are used only to produce your own summaries and guidance. Yeti never runs anything on your systems: it writes, your team decides.
What's included in dark web intelligence?
Limited covers breached credentials, infostealer exposure and paste-site leaks for your domains. Full adds monitoring of ransomware leak sites for your organisation, plus threat-actor context matched to your sector and region.
Do you install anything on our systems?
No. There are no agents to install and no credentials to give us. Discovery starts from publicly available information. The only direct contact with your systems is light, read-only checks from our published scanner address, used to confirm findings and remove false positives. We never use or store any credentials we find.
What happens to my price when the beta ends?
Nothing, for a year. Plans are 50% off standard rates while Footprint is in beta, and if you sign up during the beta that price is locked for your first 12 months. We'll tell you well before anything changes after that.
Is there a contract or minimum term?
No lock-in contract. Footprint is month-to-month. Pay annually and get two months free.
Do you have an enterprise plan?
Protect covers up to 10 domains and 10 VIP identities. If you need more than that, or SSO/SAML, an audit log, custom data retention or a custom SLA, talk to us and we'll scope it with you.
Where is my data stored?
All data is stored in AWS ap-southeast-2 (Sydney, Australia). We do not transfer your data outside Australia.
Are there any fees beyond the monthly price?
Foundation and Foundation Plus are the monthly price only. On Detect and Protect a setup or maintenance fee may apply, depending on how many domains and people you bring and whether you want a guided setup; we confirm it before you commit, never after.

Got a question? Let's talk.

Try the demo