If You're Reading This From Brazil, Our Feed Is $49.50, Not $99. From Nigeria It's $29.70. You Don't Have to Ask.
- Patrick Duggan
- 2 hours ago
- 5 min read
Threat intelligence is priced for the wrong hemisphere.
The industry standard is a number set in San Francisco or Tel Aviv or London, then charged unchanged to a bank in Ouagadougou, a hospital in Addis Ababa, and a telecom in Lahore. The attacker targeting those places does not adjust for local purchasing power. Neither, usually, does the vendor selling the defense. The result is that the organizations with the least margin for a breach are the ones priced out of seeing it coming.
We price against local purchasing power. It is automatic, it requires no request, and it has been running quietly for months.
What it actually costs where you are
Our Pro tier lists at $99 a month. Here is what it charges, by region, right now:
If you are in India, Pakistan, Bangladesh, Nepal, Sri Lanka, Myanmar, Cambodia, Ethiopia, Kenya, Tanzania, Uganda, Rwanda, Malawi, Mozambique, Madagascar, Nigeria, Ghana, Senegal, Cameroon or Côte d'Ivoire — 70 percent off. $29.70 a month.
If you are in the Philippines, Vietnam, Indonesia, Egypt, Morocco, Tunisia, Algeria, Ukraine, Georgia, Armenia, Uzbekistan, Kazakhstan, Kyrgyzstan, Bolivia, Paraguay, Honduras, Nicaragua, Guatemala or El Salvador — 60 percent off. $39.60 a month.
If you are in Brazil, Mexico, Colombia, Peru, Ecuador, Costa Rica, the Dominican Republic, Turkey, South Africa, Thailand, Malaysia, Romania, Bulgaria, Serbia, Croatia, Hungary, Poland, Czechia or Slovakia — 50 percent off. $49.50 a month.
If you are in Chile, Uruguay, Argentina, Portugal, Greece, Estonia, Latvia, Lithuania, Taiwan, South Korea, Israel, Spain, Italy or Slovenia — 30 percent off. $69.30 a month.
Roughly seventy countries in total. If you are in the US, Canada, the UK, Western Europe, the Gulf, Japan, Singapore or Australia, you pay list. That is the point — the full price funds the adjusted ones.
Same feed. Not a lesser tier.
This is the part that matters and the part most "emerging market pricing" gets wrong.
There is no stripped-down regional edition. A defender paying $29.70 in Lagos gets the identical product to one paying $99 in Boston: the same 1.6 million-plus indicators, the same STIX 2.1 and TAXII endpoints, the same IP, domain, URL, hash and malicious-package blocklists, the same OPNsense, Suricata and Unbound DNS plugins, the same MCP tools your agents can call, the same correlation graph, the same left-of-boom coverage. Same indicators, same freshness, same everything.
We did not build a cheaper product for poorer countries. We charged a different price for the same one. Those are very different things, and the second is the only one that actually helps.
You do not have to ask for it
There is no application. No proof of hardship, no institutional letterhead, no sales call, no discount code to hunt for in a footer. Checkout detects the country you are connecting from and applies the adjustment before you see the total. If you are reading this from a qualifying country, the price above is simply your price.
We are saying this out loud today because we discovered we had never said it anywhere a customer could see. The engine has been live for months, correctly applying the adjustment at checkout — and our own pricing page displayed $99 to everyone on Earth. A defender in São Paulo would load the page, read a number set for a different economy, and close the tab. The discount was real and reachable and completely invisible.
That is a familiar shape to anyone who has read this blog for a while: the thing works, and the artifact a human actually looks at is wrong. We have caught ourselves doing it with a hash blocklist that was serving thousands of curated indicators nobody could find, and with SEO metadata missing from hundreds of posts. It is the same failure wearing different clothes, and the fix is always the same — go look at what the customer sees, not at what the API returns.
The pricing page shows your regional price now.
Why we do this
The honest answer is not charity, and we would rather not dress it up as one.
The organizations in those seventy countries are the ones being worked hardest right now by crews that know the defenses are thin. Earlier today we published indicators for an Iranian-nexus campaign whose target list reads: government in Egypt, government in Jordan, government in Tanzania, aviation in Pakistan, telecom in Ethiopia, finance in Burkina Faso. Not one Fortune 500. Every one of them a place where a $99 monthly line item goes to a committee, and a $1,200 annual commitment goes to a minister.
A telecom operator in Addis Ababa is not a low-value target. It is a low-attention one. State-resourced crews have worked that out, which is exactly why intelligence needs to reach the people they are pointed at. A blocklist that only the wealthy can afford leaves the attacker a map of who is undefended.
There is a business argument too and we will make it plainly rather than pretend we are saints: a defender who can afford $29.70 pays $29.70. A defender who cannot afford $99 pays nothing, uses the free tier, and we have earned no revenue and they have less coverage. Regional pricing is how a bootstrapped shop reaches a market that list pricing simply excludes. It is right and it works. Both can be true.
If your country is not on the list
The table above comes from World Bank purchasing-power conversion factors, rounded into four bands for simplicity. Rounding means it will be wrong at the edges, and a country-level number says nothing about a specific underfunded hospital or municipal utility inside a wealthy economy.
So: if the price is genuinely the barrier, write to us and say so. That is not a sales funnel, it is a sentence in an email. We are a small shop and a human reads it.
And the free tier is free everywhere, permanently, no card — the blocklists in CSV, the STIX feed, the search API. If all you need is indicators you can pull and block tonight, you never have to pay us anything at all.
We hold this at 95 percent, as always. The band a given country lands in is a judgment call made from an imperfect index, and reasonable people would draw those lines somewhere else. What is not a judgment call is the principle underneath it: the price of knowing what is coming for you should not be set by where you happen to be standing.
Every indicator in this post is in the feed. Free.
1.58M+ IOCs, STIX 2.1 / TAXII, 88% novel vs ThreatFox, exploited-CVE leads ahead of CISA. No credit card — a free API key in 30 seconds, and you can audit every claim above against the live endpoints.
Comments