Pricing
Five plans, published prices, and a billing unit that does not charge you for Googlebot. Start on Detect for nothing and move up when the traffic justifies it.
Plans
Every plan includes the snippet, real-time verdicts and your own per-tenant reputation base. What changes as you move up is enforcement, the shared blocklist, team features and volume.
Detect
See the verdicts before you act on them. Your own reputation base, no enforcement.
- 25,000 verdicts a month
- Behavioural and transport signals
- Your own per-tenant reputation base
- Unlimited sites
Protect
Turn verdicts into enforcement at your gateway, with your own allow and deny lists.
- 300,000 verdicts a month
- Gateway enforcement
- Your own allow / deny lists
- Audit log
- Overage $0.60 per 10,000 verdicts
Protect+
Adds the shared blocklist, field capture and team access. The plan most sites settle on.
- 1,500,000 verdicts a month
- Everything in Protect
- Shared bot blocklist (opt-in)
- Field capture
- Team accounts
- Overage $0.40 per 10,000 verdicts
Scale
The same feature set as Protect+ at four times the volume and a lower overage rate.
- 6,000,000 verdicts a month
- Everything in Protect+
- Overage $0.25 per 10,000 verdicts
Enterprise
Volume, a private reputation pool, an SLA and priority support.
- 25,000,000 verdicts a month
- Everything in Protect+
- Private reputation pool
- SLA and priority support
- Overage $0.10 per 10,000 verdicts
What counts as a verdict
The billing unit is a verdict: one completed session that Karma actually decided on. It is deliberately narrower than "requests" or "page views", because those numbers are mostly noise and they punish you for traffic you never asked to inspect.
Two things are explicitly not billed:
- Confirmed legitimate crawlers. You should not pay to have Googlebot, Bingbot or an Applebot session identified — verifying them is our job, not a line item on your invoice.
- Sessions with no decision yet. If the signals were not sufficient to reach a verdict, there is nothing to charge for.
Overage rather than a hard stop
Going over your monthly allowance does not switch protection off. Verdicts keep being issued and the excess is billed at the rate for your plan — $0.60 per 10,000 on Protect, falling to $0.10 per 10,000 on Enterprise.
That ordering is intentional. A traffic spike is exactly when you most need bots stopped, and a plan that fails closed at the cap would leave your gateway with nothing to act on at the worst possible moment.
You can also buy the capacity ahead of time instead of settling it afterwards. The billing page sells verdict packs of 10,000 at your plan's overage rate, in any multiple of 10,000, and they are added to the current month's allowance the moment the payment clears. Prepaid packs are spent before overage starts, so a month you know will be busy costs the same but arrives on one invoice.
If overage is a recurring line rather than an occasional one, the next plan up is cheaper. The panel shows the crossover point on your billing page.
How this compares to the category
Two things are unusual about the table above, and both are deliberate.
The prices are on this page. Most bot-management vendors publish an Enterprise tier with "Contact sales" where the number should be, which means a procurement conversation before you can tell whether the product is even in your budget.
There is a real free tier, not a trial. Detect gives you 25,000 verdicts a month indefinitely — enough to run Karma alongside whatever you have now and compare what each one caught before you commit to anything.