Greyphish

Pricing

Plans are priced by the domains you watch. Add a domain and Greyphish generates the lookalikes an impersonator would register, then checks every new certificate and registration against them.

Free
$0

Watch one domain for lookalikes, with a daily email of what was found.

  • Watched domains1
  • Lookalike findingsAll
  • New hosts on your domainFirst 3 per domain
  • Email alertsDaily digest
  • Infrastructure mapCluster sizes
Start free
Pro
$19/month

Watch every domain you own, and send what is found to your own tools.

  • Watched domainsUnlimited
  • Lookalike findingsAll
  • New hosts on your domainAll
  • Email alertsDaily digest
  • Webhook alertsEvery match
  • WHOIS on findingsIncluded
  • Infrastructure mapDomains, hosts, nameservers
  • Breach reportsIncluded
  • Findings exportTXT, hosts file, CSV
  • API access10,000 credits

Questions

What counts as a domain?

A registrable domain such as yourcompany.com or yourcompany.co.uk. Subdomains are covered by the domain they belong to, and names without a suffix cannot be watched.

How fast are alerts?

Findings appear on your dashboard as they are detected. Both plans get a daily email digest; Pro can also send each match to a webhook.

Can I cancel?

Yes, at any time. Billing is monthly through Stripe; see the refund policy.

© 2026 Sima Technologies LLC. All rights reserved.