One machine
Investigation, cleanup, and reporting on the machine in front of you. No account required to start.
Pricing
Free covers a real cleanup. Paid tiers cover the next one.
Every purchase issues a signed license key valid for one year, activated in Settings → License, or by logging in directly from the app.
01
How it scales
How it scales
Sweep — up to 5 hosts
The same triage, pushed to a host list you provide. Agentless, no standing account.
Fleet — unlimited hosts
A separate product for the whole organization — org account, role-based access, priority support.
02
Every tier
Every tier
Free
$0
- Full malware scan with one-click quarantine and restore
- Detections - what your antivirus already caught, laid out clearly
- Exposure - what an infection could actually see or touch
- Recent scan history to compare against
Plus
$0.49/mo
$4/yr
- Full malware scan with one-click quarantine and restore
- Detections - what your antivirus already caught, laid out clearly
- Exposure - what an infection could actually see or touch
- Recent scan history to compare against
- Artifacts - leftovers from pirated software: disk images, cracked installers, tampered signatures
- Startup - everything that launches at sign-in, checked by digital signature, not by name
- Persistence - hiding places malware uses to survive a reboot: services, scheduled tasks, WMI subscriptions
- Network Center - live connections, current network profile, and Windows Firewall's own blocked-connection log
- System - settings malware likes to change: proxy redirection, blocked updates, hidden AV exclusions
- Cross-references every other antivirus installed, not just Windows Defender
- Raw data export for feeding results into other tools
Pro
$1.33/mo
$9/yr
$16/yr
44% off billed annually
- Full malware scan with one-click quarantine and restore
- Detections - what your antivirus already caught, laid out clearly
- Exposure - what an infection could actually see or touch
- Recent scan history to compare against
- Artifacts - leftovers from pirated software: disk images, cracked installers, tampered signatures
- Startup - everything that launches at sign-in, checked by digital signature, not by name
- Persistence - hiding places malware uses to survive a reboot: services, scheduled tasks, WMI subscriptions
- Network Center - live connections, current network profile, and Windows Firewall's own blocked-connection log
- System - settings malware likes to change: proxy redirection, blocked updates, hidden AV exclusions
- Cross-references every other antivirus installed, not just Windows Defender
- Raw data export for feeding results into other tools
- Scheduled Drift baselines that catch changes between scans automatically
- Branded PDF report you can hand off or file
- Unlimited scan history, not just the most recent runs
Max
$2.79/mo
$19/yr
- Full malware scan with one-click quarantine and restore
- Detections - what your antivirus already caught, laid out clearly
- Exposure - what an infection could actually see or touch
- Recent scan history to compare against
- Artifacts - leftovers from pirated software: disk images, cracked installers, tampered signatures
- Startup - everything that launches at sign-in, checked by digital signature, not by name
- Persistence - hiding places malware uses to survive a reboot: services, scheduled tasks, WMI subscriptions
- Network Center - live connections, current network profile, and Windows Firewall's own blocked-connection log
- System - settings malware likes to change: proxy redirection, blocked updates, hidden AV exclusions
- Cross-references every other antivirus installed, not just Windows Defender
- Raw data export for feeding results into other tools
- Scheduled Drift baselines that catch changes between scans automatically
- Branded PDF report you can hand off or file
- Unlimited scan history, not just the most recent runs
- Attack-chain timeline connecting related findings into one story
- Custom scan profiles tailored to a specific environment
- Sweep - push the same triage to up to 5 hosts, agentless
Enterprise
Custom
- Full malware scan with one-click quarantine and restore
- Detections - what your antivirus already caught, laid out clearly
- Exposure - what an infection could actually see or touch
- Recent scan history to compare against
- Artifacts - leftovers from pirated software: disk images, cracked installers, tampered signatures
- Startup - everything that launches at sign-in, checked by digital signature, not by name
- Persistence - hiding places malware uses to survive a reboot: services, scheduled tasks, WMI subscriptions
- Network Center - live connections, current network profile, and Windows Firewall's own blocked-connection log
- System - settings malware likes to change: proxy redirection, blocked updates, hidden AV exclusions
- Cross-references every other antivirus installed, not just Windows Defender
- Raw data export for feeding results into other tools
- Scheduled Drift baselines that catch changes between scans automatically
- Branded PDF report you can hand off or file
- Unlimited scan history, not just the most recent runs
- Attack-chain timeline connecting related findings into one story
- Custom scan profiles tailored to a specific environment
- Sweep - push the same triage to up to 5 hosts, agentless
- Fleet - the same triage pushed to unlimited hosts across the organization
- Org account with role-based access control
- Priority support, a direct line to the team
Licensing, in plain terms.