$ cat pricing.txt
Free forever. Pro when you want a hand.
The core of every tool — LogForge, LogScrub, IOC Extractor, LogAnvil, RuleForge, OS_Regex Lab and the SIEM sizing calculator — is free and always will be: every format, every mask, unlimited runs, entirely in your browser. One Bokamba Pro key unlocks the Pro conveniences in the four tools that have them. No dark patterns, no fake countdowns, no invented testimonials.
Free
$0All seven tools, in full. No account, no card, nothing uploaded.
- LogForge : paste → detect → generate → copy, 12 output formats (regex, Grok, Splunk, Elastic, Datadog, Wazuh and more)
- LogScrub : mask IPs, emails, hostnames, tokens and secrets before you share a log
- IOC Extractor : pull IPs, domains, URLs, emails, file hashes and CVEs out of a threat report — defanged indicators included
- LogAnvil : realistic synthetic test logs from 12 real formats, seeded and deterministic — up to 1,000 lines per run
- RuleForge : mixed logs → a tuned Wazuh decoder + rule set that keeps the noise at level 0
- OS_Regex Lab : test Wazuh <regex> / <match> patterns against your lines and translate PCRE
- SIEM Sizing Calculator : EPS, daily ingest and storage / retention estimates from a device inventory
- RuleForge, OS_Regex Lab and SIEM Sizing have no Pro tier at all
- Unlimited lines and unlimited runs in LogForge and LogScrub — no metering
- Up to 3 saved patterns, stored in your browser
- Shareable links — the whole state travels in the URL, nothing stored server-side
- 100% client-side: your log data never leaves the browser
Bokamba Pro
$12/mo · $99/yrOne key, every tool. Everything in Free, plus AI-assisted mapping and a synced pattern library in LogForge, bulk scrubbing plus a persistent pseudonym dictionary in LogScrub, structured IOC exports in IOC Extractor, and 100,000-line runs in LogAnvil.
-
LogForge — Ask AI to map fields
When detection is unsure, press one button to have a model suggest better field names and types. The submitted lines and current field names are sent to our server and Anthropic only when you invoke it — never automatically.
-
LogForge — synced pattern library
Your saved parsers follow your license key across machines instead of living in one browser. No account, no login screen — the key is the sync.
-
LogScrub — bulk scrub to ZIP
Drop a whole folder of logs and get back a ZIP with a scrubbed copy and its mapping CSV for every file. One shared dictionary across the batch, so the same value masks identically in every file.
-
LogScrub — persistent pseudonym dictionary
The original→replacement mapping is remembered across sessions, so the same IP or hostname always becomes the same token — even in logs you scrub next week. Custom patterns sync with your key too. The dictionary stays in your browser.
-
IOC Extractor — STIX 2.1 / MISP / CSV / JSON exports
Download the extracted IOCs as CSV, JSON, a STIX 2.1 bundle of indicator objects, or a MISP freetext import. All four are generated in your browser from the same in-page results; nothing is sent to a server.
-
LogAnvil — 100,000-line runs
Free generates up to 1,000 lines per run, which is plenty for parser smoke-tests and demos. Pro raises the cap to 100,000 lines for load-testing and larger fixtures — still all client-side and instant.
-
Priority
Bug reports and feature requests from Pro keys go to the front of the queue. That is the whole perk — no gated docs, no locked formats.
Checkout is handled by Lemon Squeezy. Cancel anytime; the yearly plan is the same thing cheaper.
Your license key is your login
There is no account and no password. When you buy Pro, Lemon Squeezy emails you one license key. Paste it into any of LogForge, LogScrub, IOC Extractor or LogAnvil and that same key unlocks the Pro features in all four on that browser — it is the only credential, and it travels only to Lemon Squeezy (to check it is valid) and, when you press "Ask AI", to our server. Nothing else about you is collected.
Already have a key?
Open any of the four tools and paste your key into its Pro panel — it is validated on the spot and remembered in this browser. There is nothing to enter here.
The free tier never breaks
Pro features live behind a small optional service. If that service is down, the tools notice and quietly fall back — every free feature keeps working, offline in your browser, exactly as before. Buying Pro never puts your core workflow at the mercy of a server.
What we don't do
No usage traps, no "3 free then pay" on the core flow, no upsell modals mid-task, no harvesting your logs to train anything. The privacy page spells out exactly what the AI feature sends and when.