Subscription
Choose your plan
Not ready for a subscription? Start with a pilot investigation.
Send us up to 1,000 IPs: an IOC list, a SIEM export, a feed extract. We start with a free coverage check and tell you exactly how many of your IPs we have data on. You decide whether to proceed before paying anything. Then, within 5 business days of your go-ahead, you get the full ClusterHawk analysis of every covered IP: tier structure, durable fingerprints, prioritized anomalies, hunting queries, and a written report.
€1,500 per investigation, one pilot per organization, fully credited toward your subscription if you subscribe within 90 days of your report.
Book a pilot investigationor email [email protected] directlyAnalyst
Core infrastructure profiling and early-warning for individual analysts and small teams
- Core Infrastructure Profiling
- Automatic Report Generation
- Email Support
- Chawkr Threat Intelligence Feed
- Noise Intelligence Mining
- Standard Processing Priority
- Hunting Queries
Limits
- 500 IP addresses
- 1 concurrent jobs
- 1 hunting query
Team
Deeper infrastructure profiling with model training for growing CTI operations
- Everything from Analyst
- Deep Infrastructure Profiling
- Model Training
- Prediction
- API Access
- Medium Processing Priority
Limits
- 1,000 IP addresses
- 200 predictions/month
- 1 concurrent jobs
- 5 custom models
- 3 hunting queries
Professional*
Full intelligence pipeline with hunting queries and priority support
- Everything from Team
- Priority Support
- Advanced Infrastructure Profiling
- Neural Network Models
- High Processing Priority
Limits
- 2,500 IP addresses
- 500 predictions/month
- 2 concurrent jobs
- 5 custom models
- 10 hunting queries
Enterprise*
Enterprise-scale threat tracking with prebuilt actor and TTP-oriented models
- Everything from Professional
- Prebuilt models - Actor and/or TTP oriented
- Highest Processing Priority
Limits
- 5,000 IP addresses
- 1,000 predictions/month
- 3 concurrent jobs
- 5 custom models
- 25 hunting queries