Skip to content
AppClap
urlscan.io is unclaimed —
U

urlscan.io

A sandbox for the web·urlscan.io

Visit

urlscan.io is a website and URL scanner that automatically browses a submitted URL like a regular user and records the resulting activity, including domains and IPs contacted, resources requested, a screenshot, DOM content, JavaScript global variables, and cookies. It flags sites targeting any of 900+ tracked brands as potentially malicious, helping analysts investigate suspicious or malicious URLs. The core scanning service is free, with commercial API and threat-hunting products available for heavier or organizational use.

What it's for

Analyzing suspicious or malicious URLsDetecting phishing and brand impersonationThreat hunting for malicious infrastructureMonitoring domains and hostnames for changesIntegrating URL scanning into SOAR platformsRetrieving phishing URL feeds via APIInvestigating malware delivery campaigns

Features 20

  • Advanced Search (including page text and title)
  • API-first access to all products
  • Automated browsing and recording of submitted URLs
  • Brand impersonation / phishing detection across 900+ tracked brands
  • Cookie recording
  • Country selection for scan origin
  • Custom scan retention
  • DOM content recording
  • Domain Feed with real-time new-hostname alerting
  • Domain Monitoring for hostnames/URLs
  • Hourly/daily Data Dumps of scanned data
  • JavaScript global variable capture
  • Phishing URL Feed
  • Residential/Tor scanning locations
  • SAML 2.0 Single Sign-On
  • Saved Searches and Search Alerts
  • Screenshot capture of scanned pages
  • Similarity Search (page structure/visual similarity)
  • SOAR platform integration via API key
  • urlscan Pro threat hunting platform

At a glance

free tierfree trialAPI
TypeWeb app
DeploymentCloud
PlatformsWeb
Forweb developers, security researchers, organizations needing additional threat insight
Companyurlscan GmbH

Integrations

OktaOneLogin

Resources

Pricing

All commercial plan prices are shown in USD, excluding applicable taxes. A 30-day free trial is available for any commercial plan. Custom pricing is available for needs beyond the listed plans.

FreeFree

API Only module, Public search visibility

Private Scans: 50/day, Unlisted Scans: 1,000/day, Public Scans: 5,000/day, Search Requests: 1,000, Result Requests: 10,000

Automate$416/mo · billed annually

No monthly price listed; only an annual price is shown.

Private Scans: 2,500/day, Unlisted Scans: 5,000/day, Public Scans: 10,000/day, Search Requests: 12,500, Result Requests: 25,000

Professional$1250/mo

Marked 'Popular!' on the pricing page.

Private Scans: 20,000/day, Unlisted Scans: 40,000/day, Public Scans: 50,000/day, Search Requests: 150,000, Result Requests: 150,000, Residential/Tor: 10,000

Enterprise$2500/mo

API + Threat Hunting module, urlscan Pro access (30 Seats), Phishing Feed, Domain Feed, 300 Saved Searches, Domain Monitoring (300 Domains), Premium Intel Reports, Data Dumps, SAML 2.0 SSO, Enterprise Security (IP restrictions, session controls), Semiannual Frequent Trainings, Custom T&Cs, Email, Phone, Zoom support

Private Scans: 100,000/day, Unlisted Scans: 100,000/day, Public Scans: 150,000/day, Search Requests: 500,000, Result Requests: 500,000, Residential/Tor: 50,000, 1 Private Location

Ultimate$5000/mo

API + Threat Hunting module, urlscan Pro access (100 Seats), Phishing Feed, Domain Feed, 1000 Saved Searches, Domain Monitoring (1000 Domains), Premium Intel Reports, Data Dumps, Managed Rules & Brands, SAML 2.0 SSO, Enterprise Security, Quarterly Frequent Trainings, 2 Hour Onboarding Call, Custom T&Cs, Email, Phone, Zoom support

Private Scans: 200,000/day, Unlisted Scans: 200,000/day, Public Scans: 300,000/day, Search Requests: 500,000, Result Requests: 1,000,000, Residential/Tor: 100,000, 2 Private Locations

Last checked 28 days ago·