Start free and pay only for more checks.
Every plan, Free included, has every check and every feature. Plans differ only in volume. Free needs no card.
No card, no trial clock
For trying Maskbreak and for small sites.
Create free account- 10,000 visitor checks a month (about 320 a day)
- No hourly limit
- 100,000 address lookups a month (Tor exits and cloud servers)
- 3 email and phone checks a day, in the API and the console
- Every signal and every feature, login protection and email & phone scoring included
VAT included · or €290 a year, two months free
For one production site with steady signups.
Choose Starter- 50,000 visitor checks a month (about 1,600 a day)
- No hourly limit
- 500,000 address lookups a month (Tor exits and cloud servers)
- 20 email and phone checks a day, in the API and the console
- Every signal and every feature, login protection and email & phone scoring included
VAT included · or €990 a year, two months free
For busy signup, login and checkout flows.
Choose Growth- 250,000 visitor checks a month (about 8,000 a day)
- No hourly limit
- 2,500,000 address lookups a month (Tor exits and cloud servers)
- 50 email and phone checks a day, in the API and the console
- Every signal and every feature, login protection and email & phone scoring included
VAT included · or €2,990 a year, two months free
For high-volume platforms and marketplaces.
Choose Scale- 1,000,000 visitor checks a month (about 32,000 a day)
- No hourly limit
- 10,000,000 address lookups a month (Tor exits and cloud servers)
- 150 email and phone checks a day, in the API and the console
- Every signal and every feature, login protection and email & phone scoring included
More than a million checks a month, set to your traffic, contractual service levels in a signed agreement and billing by invoice.
Talk to usA visitor check is one signup, login or checkout your site asks Maskbreak about; page views do not count. At the monthly limit nothing extra is charged: new checks are refused until the 1st of the next month (UTC), or until you upgrade, which takes effect at once. Prices are in euros, VAT included. Change or cancel any time in Settings → Plan and billing; a cancelled plan runs to the end of the period you paid for.
Common questions
Anything else: support@maskbreak.com.
Can I check IP addresses without a website?
Yes. An address lookup (GET /v1/lookup/{ip}, or the MCP lookup_ip tool) tells you whether the address is a Tor exit (block) and whether it sits in a cloud provider’s published range, with the provider named (review); an address on neither list comes back known: false, which does not mean it is safe. It does not tell you whether an address is a VPN or a proxy: that comes from the live visit check, which needs our script on your page.
Will you tell me before I reach the limit?
Yes. We email you early if this month's pace would use the allowance up before the month ends, then at 80% of the monthly allowance and when it is used up, and once more if your calls are still being refused three or more days later.
How do I pay?
On Stripe’s checkout page, by card, Apple Pay, Google Pay or Link. Stripe, shown as Link, is the merchant of record and emails the receipts and invoices. An upgrade takes effect at once and Stripe charges the prorated difference right away; Enterprise can pay by invoice.
I signed up before October 2026. What changes for me?
Nothing until 30 November 2026: your account has no cap at all. From 1 December it follows the Free plan (10,000 checks a month) unless you choose a paid plan; Settings shows your current allowance.
Is there a version with no caps?
For public-interest organisations, yes: hospitals, public health, government, election offices, emergency services, universities and registered non-profits fighting abuse can apply on the public-interest program page to have the caps removed from their key, free. Companies use the plans above.
Is a Data Processing Agreement available?
Yes, on every plan. Our DPA follows Article 28 of the UK and EU GDPR, includes the transfer terms and binds on acceptance, with no signature needed. A PDF is there for vendor files, a countersigned copy comes from support@maskbreak.com, and the sub-processor list gives each provider’s region. The server and the database run in the United States; EU-only processing is not available today.
What compliance certifications do you hold today?
None yet. Maskbreak is pre-audit for SOC 2 Type II and holds no SOC 2, ISO 27001, HIPAA BAA or PCI DSS attestation. We will publish the audit firm and scope when an engagement is signed.
What happens after you sign up
Your API key is ready at once. The console gives you one script and one server call to the fraud detection API for your stack, and that code starts in watch mode: it logs each decision and lets every visitor through until you turn blocking on.