Threat intelligence that fits your stack
Start free with the full database. Upgrade when you want to build on the API, get alerted about your own software, or run Signals in your own environment.
Community
For individuals keeping an eye on the landscape.
€0forever
- Live dashboard, threat database and world map
- Full-text search and every filter: CVSS, EPSS, KEV, vendor, CWE…
- AI summaries for critical and high severity threatssoon
- Public API without a key, 60 requests/min per IP
- Community support
Professional
RecommendedFor engineers and consultants building on the data.
€49per month
€39/month billed annually
Everything in Community, plus:
- Up to 5 API keys with per-key usage
- 600 requests/min per key
- Package matching API: is version X affected? (npm, PyPI, Debian…)
- Batch matching for whole dependency lists
- Saved searches with email alertssoon
Team
For security teams who need to hear about it first.
€199per month
Up to 10 members · €159/month billed annually
Everything in Professional, plus:
- 3,000 requests/min shared across 25 API keys
- Watchlists for your vendors, products and packagessoon
- Alerts to Slack, Microsoft Teams and webhookssoon
- SBOM upload and continuous matching (CycloneDX, SPDX)soon
- Shared team workspacesoon
- Priority email support, next business day
Enterprise
For regulated organisations and managed service providers.
Custom
Everything in Team, plus:
- Custom rate limits and bulk data export
- Dedicated EU-hosted or on-premises deployment
- Your own private and commercial feeds alongside public ones
- Single sign-on (SAML, OIDC)soon
- 99.9% uptime SLA and data processing agreement
- NIS2 reporting support from the BALTSEC team
Questions
- Is Signals free during the beta?
- Yes. Billing is not live yet, and beta members get Professional API limits at no cost. New registrations are paused for now; write to us to hear when they reopen. We will give at least 30 days' notice before any paid plan takes effect, and nothing is charged without your explicit sign-up.
- Do I need an account?
- No. The dashboard, database, map and a rate-limited public API are open to everyone. An account only adds API keys and higher limits.
- Where does the data come from?
- From public sources such as the NVD, the CISA Known Exploited Vulnerabilities catalog, OSV.dev, FIRST EPSS and vendor advisories, deduplicated and merged across sources. The Sources & status page lists every source and when it last updated.
- What do the “soon” labels mean?
- Those features are on the roadmap but not available yet. Plans are priced on what ships; early Team and Enterprise customers help decide what comes first.
- Are prices final?
- Prices are in euros, exclude VAT, and may change before general availability. Annual billing saves roughly 20%.
Something else? Write to [email protected].