Pricing

BGP Feed + API Subscriptions

Real-time threat intelligence delivered via API and BGP blackhole routing.

Community

$0 /mo

Free forever. No credit card.

Live threat dashboard
REST API (100 req/day)
15-minute delayed feed
No SSE real-time streaming
No BGP peering
No WireGuard tunnel
Community support only

Get Started Free

Shield

$59 /mo

BGP blackholing for single-router networks.

Live BGP blackhole feed — real-time API (2,000 req/day)
Encrypted WireGuard tunnel + your own BGP session
Works with a private ASN — no multihoming, no LOA
Auto-approved — live in minutes, not days
7-day free trial
Email support

Start Shield

or $590/yr — save $118

Professional

$299 /mo

For security teams and MSSPs.

Real-time API (10k req/day)
SSE live streaming
1 WireGuard tunnel
1 BGP session (RTBH)
Severity & category filters
14-day free trial
Email support
No custom feeds

Start Professional

Enterprise

$999 /mo

Unlimited scale with SLA guarantee.

Unlimited API requests
SSE live streaming
Multiple WireGuard tunnels
Multiple BGP sessions
Custom threat feeds
99.9% uptime SLA
Priority support

Start Enterprise

Feature Comparison

Feature	Community	Home	Shield	Professional	Enterprise
Live Dashboard
REST API Access	100/day	1,000/day	2,000/day	10,000/day	Unlimited
Feed Latency	15 min delay	Real-time	Real-time	Real-time	Real-time
SSE Streaming	—	—	—
WireGuard Tunnels	—	—	1	1	Unlimited
BGP Sessions (RTBH)	—	—	1	1	Unlimited
Email Threat Feeds	—
Custom Threat Feeds	—	—	—	—
Marketplace Access	Browse free	Browse free	Browse free	Subscribe + Publish	Subscribe + Publish
SLA Guarantee	—	—	—	—	99.9%
Support	Community	Email	Email	Email	Priority

How BGP Peering Works

Get threat blocks at the network edge via BGP RTBH.

You don't need to be multihomed. This is a private session just for receiving blackhole routes — it has nothing to do with how many upstream providers you have. A private ASN (free, no registry paperwork) and one router that speaks BGP are enough. That router does need to be something that actually runs a BGP daemon — OpenWrt, pfSense/OPNsense, VyOS, or Linux with BIRD/FRR all work. Most stock ISP routers and mesh Wi-Fi systems don't ship BGP, so if that's what you have today, see the SATIS Home plan instead.

Request Peering

Submit a peering request from your portal with your ASN (private is fine) and peering IP.

GRE Tunnel Setup

We provision a GRE or WireGuard tunnel to your nearest PoP — DFW (Dallas, TX) or BUF (Buffalo, NY) — and generate a router config for your platform.

BGP Session Established

BIRD 2 establishes a BGP session over the encrypted tunnel. You receive blackhole routes (community 64999:666).

Automatic Protection

Critical threats are announced in real time. Your edge routers null-route malicious IPs before they reach your network.

BGP RTBH Flow

  SATIS Blockchain
        |
        | threat published (action: blackhole)
        v
  ┌─ DFW  162.216.123.135 ─┐
  └─ BUF  107.174.35.183 ─┘
        |
        | BIRD 2 announces /32 or /128
        | community: 64999:666
        | next-hop: 192.0.2.1 (blackhole)
        v
  GRE/WireGuard Tunnel (encrypted)
        |
        v
  Your Edge Router
        |
        | RTBH: null-route 203.0.113.45/32
        v
  Malicious traffic dropped
  before reaching your network

Not a fit for these plans?

These are the BGP/API tiers. Two other SATIS products cover different needs.

SATIS Home

On a stock ISP router or mesh Wi-Fi — no BGP required? Home protects your network via a delta-encoded threat feed and DNS sinkhole blocklist instead of RTBH. $4.99/mo.

Learn About Home

SATIS Edge Appliance

Run a full SATIS blockchain node inside your own cloud VPC — local nftables + BGP enforcement with no API round-trip. Built for enterprise and MSSP deployments.

Learn About the Appliance

Start Protecting Your Network

Get Started Talk to Sales