1 credit = 1 uncached scan
Each file or URL scan that isn’t served from cache uses one credit. Text and code heuristics follow the same rules.
Malware scan pricing
Start free. Scale with monthly credits or pay-as-you-go packs. Hash cache hits never burn credits.
HashZyn is built for developers, IT teams, and security workflows — not noisy engine dumps. One credit = one uncached file or URL scan.
Transparent metering — you only pay when HashZyn runs a fresh file or URL scan.
Each file or URL scan that isn’t served from cache uses one credit. Text and code heuristics follow the same rules.
Paste a SHA-256 digest. If we already know the reputation, you get an instant verdict — no credit spent.
Starter and Pro include a fresh credit pool every month. Unused credits don’t roll over; credit packs add to your balance.
Every plan unlocks the same lookup, file, URL, and text endpoints. Upgrade when you need more volume or keys.
Pick the tier that matches your volume. Upgrade or buy credits when you outgrow it.
Try HashZyn on real files and URLs before you integrate.
$0/ mo
Most popular
For indie apps, CI checks, and small security teams.
$12/ mo
~$0.012 per scan at list price
For production pipelines and higher daily volume.
$39/ mo
~$0.0039 per scan at list price
Top up anytime — credits stack on your balance.
$8 pack
~$0.016 per scan
Need custom limits, SLA, or invoicing? support@hashzyn.com
Pick the tier that matches your volume. Upgrade or buy credits when you outgrow it.
| Feature | Free | Starter | Pro |
|---|---|---|---|
| Price | $0 | $12 / mo | $39 / mo |
| Scans included | 20 / day | 1,000 / mo | 10,000 / mo |
| Hash cache lookup | Free | Free | Free |
| File + URL scan | Yes | Yes | Yes |
| Commercial engine | On upload | Yes | Yes |
| API keys | 1 | 2 | 10 |
| Rate limit | Standard | Higher | Priority |
| Support | Community | Priority email |
Scan uploads, dependencies, or user links from your app with a single REST call and a clear verdict.
Check suspicious files and URLs without standing up your own multi-engine stack or storing samples.
Fail builds on malicious hashes, gate releases, or audit artifacts with API keys built for servers.
Only when we run a full uncached scan. Known SHA-256 reputations from cache are free and return instantly.
Create a free account, grab an API key, and run your first hash lookup — no credit card required.