Skip to content
Pricing

Free for everyone. Plus for families.

Checking messages is and stays free - for Renate, Mara, and everyone. To protect a whole family, get Plus. Companies, we'll talk pricing later.

Personal

€0 / forever

  • Paste & check - no account
  • Personal forwarding inbox
  • Unlimited burner aliases for family members
  • Telegram bot & browser extension
  • REST API & MCP server (fair use)
  • Audit log, GDPR export, account deletion
  • Full English and German UI

For Renate, her daughter Mara, and everyone who isn't paid to spot phishing. Up to 3 checks/day without an account, 10 with a free account.

Start free

Business

Custom / DPA & SLA

  • Team inboxes & shared triage
  • Usage-based billing (metering)
  • SSO/SCIM user management
  • Audit export & retention policies
  • Data Processing Agreement (DPA)
  • Priority support & SLA

Scampilot wired into your workflows: team inboxes, usage metering, SSO/SCIM, audit export and a DPA. Tell us your volume.

Talk to us
Why free

The people who need it most can afford it least.

Phishing hits older and financially weaker people disproportionately. A €14.99/month licence would be a wall in front of the very people Scampilot is for. We'll find another way.

We run lean.

A modest app on EU servers, one AI-provider contract, one email provider. An average phishing mail costs us fractions of a cent.

We cache what we can.

URL reputations for 24 hours. Heuristics before the AI. Identical requests aren't analyzed twice.

Business comes later.

When companies wire Scampilot into their workflows, they pay. Until then, the personal surface carries itself on very low per-request cost.

01
The small numbers

Quotas in detail.

We publish every limit. If you hit them regularly, write us - you probably need business API access.

SurfaceAnonymousSigned in Bucket
Paste & check3 / day10 / dayip-hash or user-id
Email forwarding-10 / dayuser-id
REST API-10 / dayuser-id (shared with MCP)
MCP server-10 / dayuser-id (shared with REST)
Browser extension-10 / dayuser-id
Telegram-10 / dayuser-id (after /link)

Quotas are per-user buckets: multiple API tokens share the same daily quota. That prevents quota multiplication via token sharding.

02
Three promises

What we'll never do, even after introducing paid tiers.

01

Protecting yourself stays free.

Checking (paste, mail-forward, extension, bot, API for personal use) is and stays free. Plus only adds the optional family-protection layer - nobody loses an existing feature.

02

No ads in reports.

No "Powered by" banners, no cross-sell hints. A report contains the verdict and nothing else.

03

If we ever sell, we'll say so.

An acquisition only binds these promises insofar as we make them public. That's exactly why they're here.

Frequently asked questions

What does Scampilot cost?

For individuals it is free forever: 3 checks per day without an account, 10 per day with a free account. No ads, no paywall, no data resale.

What do I get with a free account?

10 checks per day instead of 3, a personal forwarding address, burner aliases for family members, and a history dashboard.

Is there a plan for businesses?

Yes. For API integration, bulk checks, an SLA and a custom DPA there is a business tier for teams and developers.