Endpoint IndexThreatDown Pricing (October 2026)
Elite puts 24/7 MDR in an online cart, but ThreatDown's store stops at 20 devices and servers cost extra.
Prices from ThreatDown's own store, checked 2 Oct to 10 Oct 2026 in US dollars
How much does ThreatDown cost?
ThreatDown Core costs $69.00 a device a year at list price for 10 devices, on ThreatDown's own store; ThreatDown Advanced costs $79.00, ThreatDown Elite costs $99.00 and ThreatDown Ultimate costs $149.00.
List price per device a year, in US dollars, before tax. Each price links to the screenshot of ThreatDown's cart at that quantity.
| Plan | 10 devices |
|---|---|
 ThreatDown Core Antivirus (EPP) · up to 20 | $69.00 $690.00 a year |
ThreatDown Advanced EDR and XDR · up to 20 | $79.00 $790.00 a year |
ThreatDown Elite Managed EDR and MDR · up to 20 | $99.00 $990.00 a year |
ThreatDown Ultimate Managed EDR and MDR · up to 20 | $149.00 $1,490.00 a year |
EDR costs $10.00 more a device a year than ThreatDown Core. ThreatDown Core is an antivirus plan: detection and response (Endpoint Detection & Response) starts at ThreatDown Advanced, $79.00 a device a year. No plan gets cheaper per device at 100 devices than at 5.
For ThreatDown's managed plans against other providers, including those sold only by quote, see managed detection and response pricing.
Which ThreatDown plan should you buy?
- ThreatDown Core$69.00 a device a year at 10 devices
Best for: Offices of 5 to 20 devices that want antivirus and device control, not EDR
- ThreatDown Advanced$79.00 a device a year at 10 devices
Best for: Firms with someone in house to read EDR alerts and run patching
- ThreatDown Elite$99.00 a device a year at 10 devices
Best for: Offices with no IT staff that want ThreatDown's analysts on alerts 24/7
- ThreatDown Ultimate$149.00 a device a year at 10 devices
Best for: Buyers who need identity protection and a contractual response SLA
What does each ThreatDown plan include?
From ThreatDown's own plan comparison (screenshot).
| Feature | Core | Advanced | Elite | Ultimate |
|---|---|---|---|---|
| Antivirus, remediation and device control Next-gen AV, Incident Response, Device Control, Application Block | ✓ | ✓ | ✓ | ✓ |
| Vulnerability assessment Vulnerability Assessment | ✓ | ✓ | ✓ | ✓ |
| Browser phishing protection Browser Phishing Protection | ✓ | ✓ | ✓ | ✓ |
| EDR (detection and response) Endpoint Detection & Response | No | ✓ | ✓ | ✓ |
| Ransomware rollback (up to 7 days) Ransomware Rollback | No | ✓ | ✓ | ✓ |
| Patch management Patch Management | No | ✓ | ✓ | ✓ |
| Windows drive encryption Drive Encryption | No | ✓ | ✓ | ✓ |
| Managed threat hunting Managed Threat Hunting | No | ✓ | ✓ | ✓ |
| 24/7 managed detection and response (MDR) MDR | No | No | ✓ | ✓ |
| MDR Plus (malware removal, root cause analysis, published SLA) MDR Plus | No | No | No | ✓ |
| Identity threat detection (ITDR) ITDR | No | Add-on | Add-on | ✓ |
| 24/7 premium support Premium Support | Add-on | Add-on | Add-on | ✓ |
| Servers Server Protection | Add-on | Add-on | Add-on | Add-on |
| Email security Email Security | Add-on | Add-on | Add-on | Add-on |
| DNS filtering DNS Filtering | Add-on | Add-on | Add-on | Add-on |
| Mobile security (Chromebook, Android, iOS) Mobile Security | Add-on | Add-on | Add-on | Add-on |
ThreatDown Elite adds one thing to ThreatDown Advanced: 24/7 managed detection and response (MDR). ThreatDown Advanced adds EDR (detection and response), ransomware rollback (up to 7 days), patch management, Windows drive encryption and managed threat hunting to ThreatDown Core. ThreatDown Ultimate adds MDR Plus (malware removal, root cause analysis, published SLA), identity threat detection (ITDR) and 24/7 premium support to ThreatDown Elite.
What should you know before you buy?
In ThreatDown's own words, from its online store, pricing page, licence agreement, MDR page and HIPAA support article.
- Minimum purchase
- 5 devices on every plan. A cart opened for fewer is raised to 5.
- Online maximum
- 20 devices. Above that, ThreatDown sends buyers to a partner and publishes no price.
Exact wording
Prefer to purchase through a partner? Tell us about your needs and we'll personally connect you with a trusted ThreatDown Reseller or MSP.
Source ↗ - Billing
- Each store order is a 12-month subscription, charged at the start of the term.
Exact wording
All amounts are payable and charged at the beginning of the applicable subscription term.
Source ↗ - Multi-year discount
- The pricing page offers 20% off for a 3-year term on every plan.
- Servers
- Servers need their own licence on every plan. In the store a server licence costs $129.00 a year with Core, $149.00 with Advanced, $159.00 with Elite and $219.00 with Ultimate.
Exact wording
ThreatDown Core for Servers ... $129.00 ... ThreatDown Advanced for Servers ... $149.00 ... ThreatDown Elite for Servers ... $159.00 ... ThreatDown Ultimate MDR Plus for Servers ... $219.00
Source ↗ - Paid extras
- Email security ($45.00 a year), DNS filtering ($34.00) and mobile security ($10.00) are store add-ons on every plan; ITDR ($39.00) is an add-on on Advanced and Elite and included in Ultimate.
Exact wording
ThreatDown Identity Threat Detection and Response ... Unit price $39.00 ... ThreatDown Email Security ... Unit price $45.00 ... ThreatDown DNS Filtering ... Unit price $34.00 ... ThreatDown Mobile Security ... Unit price $10.00
Source ↗ - Renewal
- Subscriptions renew automatically. To stop renewal after opting in, give 30 days' written notice; email is enough.
Exact wording
Your subscription shall automatically renew (unless you opt out of autorenewal on your Purchase Receipt). Where you opt in to autorenewal and later change your mind, you can avoid automatic renewal by providing us with at least thirty (30) days’ written notice (email sufficient) prior to the renewal date.
Source ↗ - Refunds
- None for the term you have paid for.
Exact wording
You will not receive a refund for the fees you already paid for your current subscription period.
Source ↗ - Who sells it online
- The online store is run by Cleverbridge, ThreatDown's online reseller. Prices exclude tax, which the cart adds.
- Response guarantees
- Only Ultimate (MDR Plus) carries contractual response and containment SLAs. Elite's MDR quotes a median, not a guarantee.
Exact wording
MDR Plus (available in the Ultimate bundle) includes everything in MDR plus four additional capabilities ... Contractual SLAs (contract-backed response and containment guarantees).
Source ↗
How does ThreatDown compare with other small-business products?
List price per device a year at 10 devices, against every product in its category with a published price in the SMB endpoint security price index, server-only products excluded.
| Plan | ThreatDown | Category median | Price rank |
|---|---|---|---|
| ThreatDown Core | $69.00 | $54.90 | 11th of 15 |
| ThreatDown Advanced | $79.00 | $79.99 | 3rd of 7 |
| ThreatDown Elite | $99.00 | $103.00 | Lowest |
| ThreatDown Ultimate | $149.00 | $103.00 | Highest |
ThreatDown Core sits above the antivirus median; ThreatDown Advanced sits below the EDR median. ThreatDown Core costs $69.00 a device at 10 seats, against a median of $54.90 for antivirus. ThreatDown Advanced, ThreatDown's cheapest plan with EDR, costs $79.00, against an EDR median of $79.99; the cheapest EDR product in the Index, Microsoft Defender for Business, costs $36.00.
Questions about ThreatDown pricing
What is the difference between ThreatDown Core and ThreatDown Advanced?
ThreatDown Advanced adds EDR (detection and response), ransomware rollback (up to 7 days), patch management, Windows drive encryption and managed threat hunting and costs $10.00 more a device a year ($79.00 against $69.00).
Can I buy ThreatDown for fewer than 5 devices?
Not online. A ThreatDown store cart opened for 3 devices showed a quantity of 5 when we checked on 10 October 2026. ThreatDown publishes no price below 5 devices.
How much does ThreatDown cost for more than 20 devices?
ThreatDown does not publish it. Its store stops at 20 devices, and the pricing page offers "Prefer to purchase through a partner?" instead. Its MDR page says pricing is "per-endpoint with volume discounts", but no page we checked shows the volume rates.
Does ThreatDown charge extra for servers?
Yes. ThreatDown's licence agreement says you may not run its software on a server operating system "unless it is a Company server product", and its store sells server licences separately: $129.00 a year with Core, $149.00 with Advanced, $159.00 with Elite and $219.00 with Ultimate.
What is the difference between ThreatDown Elite and Ultimate?
Elite includes MDR, and Ultimate includes MDR Plus. ThreatDown's MDR page says MDR Plus adds a malware removal service, root cause analysis, threat intelligence feeds and "Contractual SLAs (contract-backed response and containment guarantees)". For Elite, ThreatDown gives a median containment time of 19 minutes from its own incident data, which is not a guarantee. Ultimate also includes ITDR and Premium Support, which are add-ons on Elite.
Does ThreatDown sign a HIPAA business associate agreement?
ThreatDown's HIPAA article does not offer one. It says Malwarebytes "is not designed for and does not expect to receive, store, process, or transmit electronic protected health data (ePHI)" and asks customers not to send ePHI to the ThreatDown Sandbox. A practice that needs a signed BAA should ask ThreatDown in writing before buying.
Prices are rechecked with the Price Index · Methodology · Changelog · Report an error