urlscan.io
A sandbox for the web·urlscan.io
urlscan.io is a website and URL scanner that automatically browses a submitted URL like a regular user and records the resulting activity, including domains and IPs contacted, resources requested, a screenshot, DOM content, JavaScript global variables, and cookies. It flags sites targeting any of 900+ tracked brands as potentially malicious, helping analysts investigate suspicious or malicious URLs. The core scanning service is free, with commercial API and threat-hunting products available for heavier or organizational use.
What it's for
Features 20
- Advanced Search (including page text and title)
- API-first access to all products
- Automated browsing and recording of submitted URLs
- Brand impersonation / phishing detection across 900+ tracked brands
- Cookie recording
- Country selection for scan origin
- Custom scan retention
- DOM content recording
- Domain Feed with real-time new-hostname alerting
- Domain Monitoring for hostnames/URLs
- Hourly/daily Data Dumps of scanned data
- JavaScript global variable capture
- Phishing URL Feed
- Residential/Tor scanning locations
- SAML 2.0 Single Sign-On
- Saved Searches and Search Alerts
- Screenshot capture of scanned pages
- Similarity Search (page structure/visual similarity)
- SOAR platform integration via API key
- urlscan Pro threat hunting platform
At a glance
Integrations
Resources
Pricing
All commercial plan prices are shown in USD, excluding applicable taxes. A 30-day free trial is available for any commercial plan. Custom pricing is available for needs beyond the listed plans.
API Only module, Public search visibility
Private Scans: 50/day, Unlisted Scans: 1,000/day, Public Scans: 5,000/day, Search Requests: 1,000, Result Requests: 10,000
No monthly price listed; only an annual price is shown.
Private Scans: 2,500/day, Unlisted Scans: 5,000/day, Public Scans: 10,000/day, Search Requests: 12,500, Result Requests: 25,000
Marked 'Popular!' on the pricing page.
Private Scans: 20,000/day, Unlisted Scans: 40,000/day, Public Scans: 50,000/day, Search Requests: 150,000, Result Requests: 150,000, Residential/Tor: 10,000
API + Threat Hunting module, urlscan Pro access (30 Seats), Phishing Feed, Domain Feed, 300 Saved Searches, Domain Monitoring (300 Domains), Premium Intel Reports, Data Dumps, SAML 2.0 SSO, Enterprise Security (IP restrictions, session controls), Semiannual Frequent Trainings, Custom T&Cs, Email, Phone, Zoom support
Private Scans: 100,000/day, Unlisted Scans: 100,000/day, Public Scans: 150,000/day, Search Requests: 500,000, Result Requests: 500,000, Residential/Tor: 50,000, 1 Private Location
API + Threat Hunting module, urlscan Pro access (100 Seats), Phishing Feed, Domain Feed, 1000 Saved Searches, Domain Monitoring (1000 Domains), Premium Intel Reports, Data Dumps, Managed Rules & Brands, SAML 2.0 SSO, Enterprise Security, Quarterly Frequent Trainings, 2 Hour Onboarding Call, Custom T&Cs, Email, Phone, Zoom support
Private Scans: 200,000/day, Unlisted Scans: 200,000/day, Public Scans: 300,000/day, Search Requests: 500,000, Result Requests: 1,000,000, Residential/Tor: 100,000, 2 Private Locations