Start free with one website and one included website security scan, or buy an annual plan for repeat assessments, public servers, APIs and client reporting. Paid plans are priced per asset place per year and billed annually.
Paid plans are billed annually per asset place. Business and Consultant places support websites, public servers and APIs.
$0/yr
Free forever · no card required
Start with FreeOne security scan, plus basic malware and uptime monitoring.
One included website security scan.
$119/yr
Per website · billed annually
Choose ProfessionalSecurity and availability monitoring for one website.
No fixed manual scan quota. Queue, concurrency, scope and execution limits apply.
$155/yr
Per asset place · billed annually
Choose BusinessProtect business assets, including websites, IP servers and APIs.
No fixed manual scan quota. Queue, concurrency, scope and execution limits apply.
$486/yr
Per asset place · billed annually
Choose ConsultantScan client assets, including websites, IP servers and APIs, and deliver reports with your own logo. Monitoring is not included.
No fixed manual scan quota. Queue, concurrency, scope and execution limits apply.
Business covers 1 to 10 places.
$465 / year
3 places x $155
You see the annual unit price, quantity and total before you pay.
Registering keeps your plan choice and activates no paid feature until payment.
Tick what you need to assess. The recommendation updates as you go.
What do you need to cover? (pick any)
to try a website assessment: one website, one included security scan and basic monitoring.
Start with Freefor public servers, Linux SSH checks, API testing, extended scan profiles, optional AI-guided website checks and the customer API.
Choose Businessto assess client assets and deliver branded reports. Read about the Consultant plan. It excludes ongoing monitoring, AI-guided checks and customer API tokens.
Choose ConsultantAn asset place is one asset that occupies your purchased allowance. Paid prices are per place per year, and the quantity limit is the most you can buy, not the number included in one purchase.
Pick a plan to highlight its column.
| Feature | Free | Professional | Business | Consultant |
|---|---|---|---|---|
| Assets | ||||
| Assets | 1 website | 1 website | 1 to 10 places: website, public IP or server, Web API | 1 to 200 places: website, public IP or server, Web API |
| Scanning | ||||
| Website security and malware checks | 1 included scan | Repeat scans | Repeat scans | Repeat scans |
| Extended scan profiles | ||||
| Public server assessment and authenticated Linux SSH checks | ||||
| API assets and supported authenticated API tests | ||||
| Optional AI-guided public website checks | ||||
| Discovery review inbox | ||||
| Reporting and integrations | ||||
| Customer API and signed completion webhooks | ||||
| Client management and branded reports | ||||
| Monitoring | ||||
| Ongoing monitoring | Basic | Website | Business modules | Not included |
These capabilities are not tied to one plan. They apply in every plan where the asset, scan profile or finding supports them: browser exploration of JavaScript websites and out-of-band callback checks under supported website profiles, behavioral malware modes, CISA KEV and EPSS prioritization for eligible CVE findings when intelligence is available, coverage reporting, grouped findings and CSV and PDF exports.
Paid plans have no fixed manual scan count quota. Queue, concurrency, scope and execution limits apply.
Monitoring runs on a schedule that depends on the plan and the type of check. Consultant does not include monitoring.
Alerts are grouped, and repeats of an unchanged issue are suppressed. Alert delivery follows detection and is not guaranteed in real time. DNS checks run on their own schedule, so DNS frequency is not the same as availability frequency.
Free costs $0 and covers one website with one included website security scan. Basic monitoring is separate from that one scan. No card is required.
An asset place is one asset in your purchased allowance: a website, a public individual IP or server, or a Web API. The price is per place per year, and the quantity limit is the most you can buy, not the number included.
No. New paid purchases are annual only. Existing legacy entitlements remain separate from these plans.
No. Registering keeps your plan choice, and paid features activate after payment.
Eligible unused paid term is credited toward the higher plan. You see the annual total before you pay.
Paid plans have no fixed manual scan count quota. Queue, concurrency, scope and execution limits apply.
Business adds public individual IP and server assets, authenticated Linux package checks through SSH, API assets with supported authenticated tests, extended scan profiles, optional AI-guided public website checks, the customer API with signed completion webhooks and the discovery review inbox. Professional covers one website.
Consultant is for security consultants, agencies and managed service providers who assess authorized client assets. It adds client management and branded reports. It excludes ongoing monitoring, AI-guided checks and customer API tokens.
Not in the current self-service workflow, which supports authorized public assets. Private connectors, CIDR ranges and gRPC are not released.
Create a free account for one website and one included security scan. Upgrade later if you need repeat assessments, public servers, APIs or client reporting.
