Number of Seats/Users: Extended Threat Intelligence offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Extended Threat Intelligence that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Extended Threat Intelligence. Extended Threat Intelligence reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Extended Threat Intelligence offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Extended Threat Intelligence. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Extended Threat Intelligence often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Extended Threat Intelligence is seen as a strong, but not cheap, choice for organizations that care a lot about external risk and leaked data.

From what Spendbase clients tell us, the main perceived strengths are:

• Broad external coverage
• Very good at discovering “fingerprints” of the organization across the internet
• Strong monitoring of leaked data, phishing domains, breaches, and fraud

• Deep and dark web coverage is frequently called out as a key advantage

• Actionable security value

• Alerts are generally seen as relevant and useful, not just noise
• Helps security teams prioritize external threats and reduce manual hunting

• Good fit for organizations building or maturing a threat intelligence function

• Useful for investigation and monitoring

• Supports incident investigations and brand protection efforts
• Helps track ongoing campaigns or threat actors targeting the company

At the same time, our internal data also highlights several recurring concerns:

• Pricing and licensing
• The “price per asset” model is a common pain point
• Clients feel costs ramp up quickly as they add more domains, brands, or assets

• Budget owners often ask for clearer ROI or bundling options

• Coverage gaps

• Limited or weaker coverage on social networks is mentioned multiple times

• Some clients want deeper visibility into social media abuse and impersonation

• Usability and operations

• Initial setup and tuning can take time
• A few clients mention dealing with false positives until the system is customized
• Some teams would like richer reporting for executives and compliance use cases

From a Spendbase discount perspective, the patterns are clear:

• Teams with many internet-facing assets are the most cost-sensitive
• Clients are more willing to renew at current pricing when:
• They can clearly map alerts to prevented incidents or fraud savings
• They use multiple modules (threat intel + digital risk + attack surface)
• The strongest negotiation lever tends to be asset volume and contract length

In short, Extended Threat Intelligence delivers solid value in external threat monitoring, but our clients consistently push for better pricing flexibility and improved social media coverage.