Credits and limits for Discovery
Discovery runs use credits. This page explains what a run costs, when you are charged, what happens when credits run out, and the limits on a single run.
What a run costs
One discovery run costs one discovery run charge, currently 10 credits. The charge covers the whole run, however many checks it holds and however many targets you selected in Advanced mode.
Note: The exact price is set for your plan. The run window always shows the real figure before you start.
| Where | What you see |
|---|---|
| Run discovery window | "Costs N credits · M available", or "Included in your plan" |
| Rate now on a domain with no rating | The credit cost, then a confirmation |
| Repeat menu on a run | A reminder that each repeat uses credits |
Rating new root domains from an API call is charged per root domain: 10 credits each, up to 100 domains per call.
When you are charged
- Credits are charged when a run starts.
- A scheduled run is charged each time it fires.
- Starting a run that is already running, or repeating a Simple run that finished in the last 24 hours with the same detective and target, is free. Hunto shows the existing run instead. See Run a discovery.
- Changing the Repeat of an existing schedule is free.
- Importing findings is free. See Import findings.
- Adding findings to detections, reading reports and browsing runs are free.
Automatic rating of new domains
When a new root domain appears in your assets, Hunto can rate it automatically with one Outside-in rating run, at 10 credits per domain. It records a baseline first and only rates domains that appear after that. It stops at the first credit refusal, so it will not push you into a negative balance.
To turn this off, clear Rate new root domains automatically (10 credits each) in your organisation's settings.
When credits run out
A run that cannot be paid for does not start. The window tells you why.
| Message | Meaning | What to do |
|---|---|---|
| Not enough credits | Your balance is lower than the cost | Select Top up credits |
| "Discoveries are paused" | Discovery use is locked for your organisation | Contact your account administrator or support |
| "Renewal unpaid" | Your plan renewal has not been paid | Pay the renewal, then try again |
A scheduled run that cannot start is skipped. The schedule stays active and tries again at the next time it is due. Runs already started are not stopped by a low balance.
Limits on one run
| Limit | Value |
|---|---|
| Targets in Advanced mode | Up to 50 targets or assets |
| Targets in Simple mode | One |
| Target types | Domain, host, IP address, CIDR range, URL, email address |
| Follow-up rounds in a saved detective | 1 to 10, default 3 |
| New targets one check may add | 1 to 5000, default 500 |
| Results added to detections at once | 500 |
| Rows in one import | 5,000 |
| Domains rated per API call | 100 |
The seven Hunto detectives have their own built-in depth and breadth. Outside-in rating and Attack surface go three rounds deep. Email & DNS security is one round and stays small.
Ways to spend fewer credits
- Use the slowest Repeat that meets your need. A weekly run costs a quarter of a daily one.
- Choose a focused detective, such as Lookalike domains, instead of Full sweep, when you only need that answer.
- Do not run the same target twice in a day. Simple mode reuses a fresh completed run for free.
- Use Advanced with one selection of many targets, rather than many single runs. One run covers the whole selection.
- Turn Repeat to Off on runs you no longer need.
Use cases and wiring tips
- Budget a weekly sweep. Multiply the run charge by the number of scheduled detectives and by the runs per month, then compare with your plan credits.
- Watch balance. Credit balance and top-ups are on the billing page. See the "Plans, credits and limits" guide.
- Wiring. Plan limits can hide checks that your plan does not include. They appear as Needs ... in the run window.