// SUPPORT
Evil-DB is free.
No paywalls, no per-seat pricing — just a generous free tier for everyone. It's run by one person and funded by the people who find it useful. If that's you, chipping in keeps the feeds flowing and the servers on.
What you get — free, for everyone
- 1,000 threat lookups per day
- Full IP / domain / hash intelligence
- IP enrichment (geo, ASN, proxy/VPN/Tor)
- Bulk lookup API (100 / request)
- Downloadable blocklists + custom exports
- CVE matching (NVD · EPSS · CISA KEV)
- STIX / TAXII feeds
- 5 API keys · 10 webhooks · saved-search alerts
Need higher limits or a commercial SLA? Get in touch.
Why donations?
Is it really all free?
Yes. Every feature — lookups, blocklists, exports, bulk API, STIX/TAXII — is open on the free tier. Donations are voluntary and unlock nothing extra; they just keep the project alive.
Where does the money go?
Servers, bandwidth, and the paid threat-intel APIs Evil-DB enriches against. It's a solo project, so every bit goes straight back into running it.
Can I use it commercially?
Yes, within the daily limits. If you need higher throughput or a contractual SLA, reach out and we can sort something out.
What counts as a lookup?
Each IP / domain / hash you check counts as one; bulk lookups count each item. Limits reset daily at midnight UTC.