What happens after I buy?

We email your licence key as soon as payment clears. Paste it into GraphDagger to activate. Each licence activates one device.

Every tool, on macOS and Windows. One plan, with no tiers and no feature gates. While your subscription is active you get every update and any new tools we ship.

Can I try before I buy?

Yes. Enter your email, go through checkout, and your 14-day free trial starts straight away with every tool unlocked. Nothing is charged while the trial runs. Cancel before it ends and you pay nothing at all; leave it running and the first payment is taken on day 14.

What is the difference between monthly and annual billing?

Both include exactly the same product: every tool, every update. Annual billing is paid once a year at a discount to the monthly price, and both start with the same 14-day free trial.

Can I cancel any time?

Yes. Cancel from your billing portal whenever you like. Your licence stays active until the end of the period you have already paid for, whether that is the current month or the current year, and you will not be charged again.

One plan. Everything inside

Full access to every tool in GraphDagger. No tiers and no feature gates.

GraphDagger

£25/mo

Per seat · billed monthly · cancel any time

Shown in GBP, inclusive of VAT. Pricing may vary by region and is subject to change; the final amount payable will be confirmed before you complete your purchase.

Seats

£25/mo

Free for 14 days. Then £25/mo for 1 seat. Cancel anytime.macOS · WindowsSee licensing terms →

Traffic

Capture, proxy and send traffic

Packet Capture

Live capture on any interface, plus pcap import and export
Field-based display filters and payload search
Layer-by-layer dissection with raw hex view
TCP stream follow, connection graph and forensic timeline

Web Debugger

HTTPS interception with a generated CA
Capture from a browser, terminal, remote device or proxy port
Breakpoints that pause a request or response mid-flight
Rules engine, JavaScript scripting, Map Local and Map Remote
HAR import, performance metrics and API spec generation

API Client

HTTP, GraphQL, gRPC, WebSocket and server-sent events
OAuth2, AWS SigV4, JWT bearer and digest auth
Collections, environments, cookies and dynamic variables
Pre-request scripts, tests and a built-in mock server
Visual flow builder, code snippets and Postman import

Playwright Inspector

Record Chromium, Firefox and WebKit traces, or open your own
DOM snapshot playback on a single synced clock
Network waterfall and activity histogram
Unified action, console, network and event list

Analyse

Read and inspect files, logs and messages

File Triage

Hashing, signature detection, entropy and string extraction
Parsers for PE, ELF, Mach-O, PDF, OOXML, OLE, RTF and VBA
YARA rule editor, test harness and match viewer
Carving for embedded files, packed regions and polyglots
OCR on images and indicator extraction into a report panel

Email Forensics

Full header breakdown from eml, mbox or pasted source
SPF, DKIM, DMARC and ARC verdicts in one view
Hop-by-hop delivery route reconstruction
Built-in phishing rules plus rulesets of your own

Log Explorer

Around 50 log formats detected on open
Field search or full SQL across millions of rows
Faceted fields, activity histogram and CSV export
Pattern extraction and per-key transaction rollups

Audio Inspector

Synced waveform and spectrogram with adjustable FFT
DTMF, Morse and SSTV decoding over any selection
LSB steganography payload extraction
Container metadata anomalies and amplitude measurements

Workbench

Transforms, lookups and everyday tools

Data Transform

100+ chainable blocks across 13 categories
Visual canvas showing the data at every step
Encoding, hashing, encryption, threat intel and log parsing
Save to a library, then run on a schedule or a file watch

Auth Inspector

JWT, SAML, OAuth, X.509 and Kerberos, detected automatically
Security audit with ranked findings for each type
Generate credentials from JSON and diff two side by side
Token timeline, certificate chain and protocol flow diagrams

Network Recon

DNS, WHOIS, TLS, email security and path checks
Port scanner with host discovery, services and topology
Crawl and API scan with site map and findings

Database Client

SQLite, PostgreSQL, MySQL and SQL Server in one tree
Browse, filter and edit rows inline
SQL editor with query plans and chartable results
ER diagram, schema editing and a live query log

Geo Map

Import Shapefile, GeoJSON, KML, GPX and WKT as layers
Thematic colour, labelling and render modes
Draw, measure and run spatial queries
Attribute table, timeline playback and image overlays

Remote Terminal

Local shells and SSH sessions in split panes
Saved profiles, ssh config import and quick connect
SFTP file browser over a session you already have open
Broadcast, scrollback search and an infrastructure map

Included with every seat

Every tool unlocked, with no tiers or add-ons
Spotlight command bar in every workspace
Charts from any results table
Desktop app for macOS and Windows
Unlimited updates and new features