Pricing
Free Scan

ScanTitan Consultant plan

Security scanning for agencies and consultants

Assess client websites, public servers and APIs, then deliver clear reports with your branding. Organize work by client, run assessments only on assets you are authorized to test, and help each customer focus on the findings that need attention first. ScanTitan Consultant is built for independent security consultants, cybersecurity consulting firms, digital agencies and managed service providers who sell assessments.

  • Websites, public servers and APIs
  • Branded PDF and CSV reports
  • Annual billing, 1 to 200 asset places

Consultant costs $486/year per asset place, billed annually. Choose the number of places you need.

See the reporting workflow

How a Consultant assessment works

The Consultant plan organizes assessments around your clients. You create a client, assign each asset to it, and every scan and report stays attached to that client. ScanTitan asks you to confirm authorization before an asset is added, because finding a host on the public internet does not prove that you own it or may test it. A discovered host goes to a review step first and uses an asset place only after you add it.

  1. Create a client for each customer, so assets and reports stay separate.
  2. Add an authorized public asset: a website, a public individual IP or server, or a Web API. Each asset uses one asset place.
  3. Choose the settings and scan profile that fit the asset, and confirm you have permission to assess it.
  4. Run the assessment and wait for the result. Scope, queue and time limits apply.
  5. Review the findings, grouped by repeated issue and ordered by severity.
  6. Export the report as PDF or CSV, with your branding on the client report.

Built for consulting engagements

Use ScanTitan inside a consulting engagement, not instead of it. ScanTitan finds and documents issues on public assets, and you add the scoping, judgment and advice your client pays for. Independent consultants and consulting firms can run the same workflow for every client, with the client name and your branding on the deliverable.

  • Scope each engagement by adding only the client assets you are authorized to assess.
  • Run a baseline assessment of the client public websites, servers and APIs before deeper manual testing.
  • Deliver the findings as a branded report that fits into your risk assessment or audit deliverable.
  • Repeat the assessment after remediation to show the client what changed.

ScanTitan does not replace your own analysis. It covers authorized public assets only, and each report states the checks that ran and the limits of the assessment.

Discovered asset review screen where a candidate is confirmed as authorized and assigned to a client, shown with a reserved example.test domain
Review a discovery candidate and confirm authorization before adding it to inventory. Reserved example.test domain and synthetic data.

What a Consultant assessment can cover

Coverage depends on the asset type and the scan profile you choose, and each report states the checks that ran and the limits of the assessment.

  • Explore websites with an automated browser where the profile supports it, so pages and requests that only appear after JavaScript runs can be discovered. Scope and time budgets still apply, and not every route or workflow is exercised.
  • Check websites for malware, including behavior modes where they are enabled for the profile.
  • Assess public individual IP and server assets, including authenticated Linux package checks through SSH.
  • Test Web API assets from OpenAPI, Postman, GraphQL queries and SOAP, with declared role-access tests.
  • Prioritize eligible CVE findings with CISA KEV and EPSS when intelligence is available.

Read more on the JavaScript scanner, API scanner, network scanner and IP scanner pages. The current self-service workflow supports authorized public assets only. Private networks, CIDR ranges and gRPC are outside the released scope.

Reports your clients can read

Each assessment produces a report with an executive summary, an overall reported risk, finding counts by category and a note on scope and limitations. Findings carry a severity, and eligible CVEs show CISA KEV and EPSS context when it is available. Repeated issues are grouped, so a client sees one problem instead of fifty copies of it. Reports export as PDF and CSV. Consultant adds your branding to the client report and a client organization to keep work separate. It is not a white-label portal, and it does not make ScanTitan a reseller platform.

Demonstration Consultant report with custom branding, an executive summary and assessment limitations
Demonstration report showing Consultant branding, an executive summary and assessment limitations. Fictional Northstar and example.test data.
Demonstration of applying custom branding to a ScanTitan client assessment report
Apply your branding to the client assessment report. Fictional Northstar logo used for demonstration only.

Consultant pricing and scope

Consultant is billed annually per asset place. One asset place holds one asset in your purchased allowance, and you can buy from 1 to 200 places. The price is per place, and 200 is the purchase ceiling, not a bundle included in one purchase. Business and Consultant places both support websites, public servers and APIs.

Paid plans are billed annually per asset place. Business and Consultant places support websites, public servers and APIs.

Consultant

$486/yr

Per asset place · billed annually

Scan client assets, including websites, IP servers and APIs, and deliver reports with your own logo. Monitoring is not included.

  • Website security, malware and exposure checks
  • Extended scan profiles
  • Public server assessment and authenticated Linux package checks through SSH
  • OpenAPI, Postman, GraphQL queries, SOAP and declared role-access tests
  • Client workspaces and branded reports; monitoring excluded
  • KEV and EPSS prioritization when intelligence is available
  • Grouped findings, CSV and PDF reports

No fixed manual scan quota. Queue, concurrency, scope and execution limits apply.

Not included in Consultant:

  • Ongoing monitoring of availability, DNS, TLS, malware or vulnerabilities. Business includes monitoring modules.
  • AI-guided website checks. These are an optional Business feature.
  • Customer API tokens and signed completion webhooks, which belong to Business.

Registering does not activate paid features. Free is a separate website plan with one included scan, and a Consultant purchase activates after payment.

Consultant plan questions

What does one asset place buy?

One asset place holds one asset in your purchased allowance. The annual price is per place, and 200 is the most you can buy, not the number included.

Can we scan client APIs and servers?

Yes. Supported public individual IP or server assets and Web API assets are available. Linux SSH checks and supported API authentication are included.

Can we use our own branding?

Consultant supports branded reports and client management. It is not a fully white-label portal or a reseller platform.

Are monitoring and integrations included?

Ongoing monitoring, customer API tokens and AI-guided checks are not included in Consultant. Business has those entitlements.

Is there a Consultant free trial?

Registering does not activate paid features. Free is a separate website plan with one included scan. A Consultant purchase activates after payment.

Can we scan private networks?

The current self-service workflow supports authorized public assets. Private connectors, CIDR ranges and gRPC are outside the released scope.

Is Consultant suitable for independent consultants and small consulting firms?

Yes. Consultant is built for independent security consultants, consulting firms, agencies and managed service providers who assess authorized client assets. You buy asset places from 1 to 200, so a solo consultant can start with a few places.

Does the scan replace my own assessment?

No. ScanTitan automates discovery and documentation of issues on authorized public assets. Scoping, validation, advice and remediation planning stay with you, and each report states the checks that ran and the limits of the assessment.

Choose Consultant

Assess client assets, organize them by client and deliver branded reports. Consultant costs $486/year per asset place, billed annually, and you choose how many places to buy.