PRICING

Pay for what you protect.
Not for seats you never use.

Every product is priced by what it secures. Developers for code, accounts for cloud, applications and domains for pentests.

ENTERPRISE

Everything else,

scoped to you.

A year of testing, inside and outside the network, under an MSA.

Custom, annual contract. Proposal within 2 business days.

01

365 days of attack surface monitoring

02

MSA, security questionnaires, vendor onboarding

02

MSA, security questionnaires, vendor onboarding

03

Internal network, cloud, Kubernetes, Active Directory

04

Continuous pentesting

04

Continuous pentesting

05

A named researcher in your Slack or Teams

06

PCI DSS 11.4, including segmentation testing

PRICE LIST

Every product,

one unit, one price

ModuleUnitBilled annually
per developer per month$24
per developer per month$24
per developer per month$40
per cloud account per month$299
per organization per month$599
per domain per month$99
per application per month$199
per application, one time$4,000one time
per application, one time$7,000one time
External network pentest, all subdomainsper root domain, one time$4,000one time

Prices in USD. Subscriptions billed annually upfront; monthly billing 20% higher. Pentests paid before the test starts. Threat actor intelligence is included in 360 and Enterprise.

FREQUENTLY ASKED QUESTIONS

Questions about

pricing.

Billing, contracts and how a pentest runs.

Is the pentest a vulnerability scan?

No. A scanner matches signatures and reports possibilities. Our agents attempt the exploit and report only what worked, with the proof. Add a researcher and every finding is confirmed by hand as well.

What if you find nothing?
What happens after I pay for a pentest?
Do I need a contract?
Can I pay by invoice instead of card?

Catch bugs

Catch bugs

before others do.