We Need Seven Paying Customers to Keep the Feeds Free. We Have Two.

We are going to do the thing security companies never do and show you the books. Not because we are in trouble — we are not — but because the whole point of this operation is that we tell you the truth, and the truth includes our own number. So here it is.

It costs about $650 a month to run everything you get for free. The Azure bill is around $545 (we just audited it — it is lean, no fat to cut). Claude runs about $100. Add the small stuff — GitHub, Wix, Cloudflare — and it lands near $650, out of our own pocket, every month.

Against that, the paying side of the business currently brings in $144 a month. Two customers. That is the honest gap: we spend $650 to make $144, and we cover the difference ourselves because we think the free feeds matter more than the shortfall.

That is sustainable for a while. It is not sustainable forever. So this is the reminder — to you and to us — that without paying subscribers, this changes.

Here is exactly what it would take

We are not asking for a funding round. We do not want one. We are asking for a specific, small number of people to cover the cover charge.

Seven DugganUSA Pro subscriptions at $99 a month covers the entire operation. Not seven hundred. Seven. We have two today. We need five more.

Or one DugganUSA Enterprise subscription at $995 a month does the same thing on its own — one company that runs the full suite and keeps the free tier free for everyone who cannot pay.

That is the whole math. Five more Pro customers, or one Enterprise, and the feeds stay free for the foreseeable future. That is not a metaphor or a stretch goal. It is arithmetic, and it is small enough to be real.

Why us

Because we give away the thing everyone else sells. Our STIX feed, our IP and domain blocklists, the IOCs behind every campaign we cover — free, no key gymnastics, no seat minimums. This week alone we harvested the indicators for a China-nexus espionage crew that was inside a Vietnamese public hospital and phishing the National Congress of Honduras, and we put all nine into the free feed so a hospital IT team and a legislature's sysadmin could block them without a purchase order. That is not a marketing story. That is the product.

Because we get to the truth fast and we are honest about accuracy. We flagged the Langflow attack surface in March, four days before it hit CISA's exploited list — and when we overclaimed a two-month lead on another campaign, we published a correction with our own timestamp proving we were a day late. We would rather be right and admit the misses than be loud and hope you do not check. A pipe moves data. We tell you which of it is true, and we tell you first.

Because it works, and the receipts are public. Thirty-two thousand unique visitors a week. Sixty-five thousand feed pulls a month across dozens of production security stacks. An MCP tool that thirty-nine different clients call to check packages before their AI agents install them. Independent citations from Daniel Miessler's newsletter, Arctic Wolf, and the IETF 126 hackathon. We did not buy any of that. We earned it by being useful.

Because we took no venture money, which means the feed answers to defenders, not to a board. Nobody upstream is going to make us gate the blocklist to juice a metric. The only people we owe are the ones using it.

Why now

Because the honest moment to ask is before you are desperate, not after. We are asking now, while the work is at its best and the number is at its smallest, because that is the truthful version. If we waited until it hurt, the ask would be a plea. Right now it is just a fact: five customers stands between "free for everyone" and "we had to change how this works."

And because you are probably already using it. If our feed has ever blocked something on your edge, if a post here got you patched before a breach reached you, if you pull the IOCs into your SIEM — you already know whether this is worth $99 a month. The people who cannot pay never will, and that is exactly who the free tier is for. The people who can are the reason it can exist.

The ask

If the work has earned it, subscribe. DugganUSA Pro is $99 a month; Enterprise is $995. Start Pro at analytics.dugganusa.com/stix/register?tier=pro — and there is a launch code, RESCUEME, that takes 40% off your first month. For Enterprise, the pricing page at analytics.dugganusa.com/pricing has the contact link. Free stays free — 25 queries a day, every index, all the plugins — at analytics.dugganusa.com/stix/register, and it always will if enough of the people who can pay, do.

Five more Pro customers, or one Enterprise, and the feeds stay free for every defender who needs them and cannot pay. That is the entire pitch. No urgency theater, no countdown clock — just the honest number and a small, reachable ask.

We built something that works and gives most of itself away. Help us keep it that way.

---

Every indicator in this post is in the feed. Free.

1.58M+ IOCs, STIX 2.1 / TAXII, 88% novel vs ThreatFox, exploited-CVE leads ahead of CISA. No credit card — a free API key in 30 seconds, and you can audit every claim above against the live endpoints.

Get your free key → analytics.dugganusa.com/stix/register