Billing
Billing is managed via Stripe. The billing API endpoints handle subscription status, plan upgrades, and portal access.
Endpoints
| Method | Path | Description |
|---|---|---|
| GET | /api/v1/account/billing | Get billing status and plan |
| POST | /api/v1/account/billing/portal | Create Stripe portal session |
| POST | /api/v1/account/billing/upgrade | Initiate plan upgrade |
Subscription Tiers
| Tier | Price | Key Features |
|---|---|---|
| Free | $0/mo | CVE search (10 results per page) |
| Standard | $199/mo | CVE search (100 per page), webhooks, 1 environment, 50 assets, 2 members |
| Professional | $499/mo | CVE search (100 per page), API keys (25,000 calls/mo), SAGE full, 10 environments, 1,000 assets, 5 members |
| Enterprise | $1,499/mo | CVE search (100 per page), full API access (unlimited calls), 25 environments, 5,000 assets, 25 members, SLA, dedicated support |
Request rate is governed by fair use rather than a published per-minute quota.
Upgrade
curl -X POST \
-H "Authorization: Bearer bs_live_..." \
-H "Content-Type: application/json" \
-d '{"plan": "professional"}' \
"https://breachspider.com/api/v1/account/billing/upgrade"
Returns a Stripe Checkout session URL. Redirect the user to complete payment.
Webhook Events
Stripe sends billing events to /api/v1/billing/stripe-webhook. These are handled internally and update the member's tier automatically.