Plans and pricing
The plans below are for organisations granted access to the AbuseRoute API. Access is not public or self-service; trial and production keys are issued on request. Plans are sized by monthly lookups, quoted per organisation in EUR or GBP, and invoiced by bank transfer. No card required. Every paid plan starts with a free trial.
Trial
50 lookups a day
- 5 requests a minute
- Valid two days from first use
- Full response, all fields
- Extended on request if you need longer to evaluate
Starter
5,000 lookups a month
- 60 requests a minute
- Email support, UK business hours
- Monthly or annual invoicing
Pro
25,000 lookups a month
- 120 requests a minute
- Priority email support
- Bulk endpoint when available
- Monthly or annual invoicing
Business
100,000 lookups a month
- 300 requests a minute
- Availability commitment and named contact
- Dedicated infrastructure
- Annual invoicing, DPA on request
Service Provider
The plans above are for teams handling their own incidents. If you use the results inside a service you deliver to your own clients, for example a managed SOC, a takedown or brand protection service, or a CERT serving a constituency, the Service Provider plan is the right fit: 250,000 lookups a month, 600 requests a minute, a 99.5% availability target, a data processing addendum, priority support with a named contact, and a licence that explicitly covers use on behalf of your clients. Annual invoicing. Request a quote.
Why prices are quoted rather than listed
Volumes, required fields and support expectations vary widely between security teams, and a single price list would either overcharge small teams or undercharge large ones. We would rather quote each organisation for what it actually needs. Tell us your expected monthly volume and we answer within one business day; quotes hold for 30 days.
What every plan includes
- Registrar abuse contact, hosting network abuse contacts, DNS observations and infrastructure classification for every lookup.
- A routed, deduplicated
abuse_contactslist ordered for action. - gTLD and ccTLD coverage, internationalised domain names, all five RIRs.
- No storage of your lookups beyond a short operational cache. No profiling of your investigations.
- Terms that keep you on the right side of registry data rules, so you do not have to read five sets of them yourself.
Questions we get asked
Can we pay by card?
Not at present. Invoices are settled by bank transfer, which is how most security teams' procurement works anyway. Card payment is planned.
Do you charge VAT?
WappDev is not currently VAT registered, so no UK VAT is charged. Business customers outside the UK account for VAT in their own country under the reverse charge rules. Invoices state this.
Is there a contract?
The Terms of Service and Acceptable Use Policy, plus a one-page order confirming plan, price and term. Business customers can request a data processing addendum.
What happens if we exceed the quota?
On paid plans, requests continue to be served up to three times your daily allowance and the excess is invoiced as overage at the rate on your order, monthly in arrears. Each overage response carries a header saying so. The ceiling protects the registries we query. If you regularly exceed, we will suggest moving up a plan. Trial keys stop at their daily allowance.
Can we cancel?
Monthly plans: 30 days' notice. Annual plans: at the end of the term. If we ever have to withdraw part of the service because a data source changes its rules, you get a pro-rata refund for that part.