Simple, Transparent Pricing
Choose the plan that fits your needs. Upgrade or cancel anytime.
The free tier runs 71 quick scanners. Paid plans unlock the deep tier — 272 scanners including the full 13,000-template Nuclei pack, WordPress suite and exploit-availability intelligence.
Free
Perfect for checking your website security occasionally.
- 1 scan/month
- 1 website
- Quick tier only — 71 scanners
- Continuous monitoring
- PDF report export
- White-label reports
- Exploit intel on every CVE
Professional
For small businesses that need regular security checks and PDF reports.
- 10 scans/month
- 5 websites
- 5 deep scans/month — 272 scanners
- Continuous monitoring
- PDF report export
- White-label reports
- Exploit intel on every CVE
Business
For agencies and businesses managing multiple client websites.
- 50 scans/month
- 25 websites
- 25 deep scans/month — 272 scanners
- Continuous monitoring
- PDF report export
- White-label reports
- Exploit intel on every CVE
Enterprise
For large organizations with unlimited scanning needs.
- Unlimited scans/month
- Unlimited websites
- Unlimited deep scans
- Continuous monitoring
- PDF report export
- White-label reports
- Exploit intel on every CVE
Quick scans run 71 fast scanners — free forever. Deep scans unlock all 272: the complete Nuclei pack, WordPress suite, parameter-mutation testing and OWASP ZAP-class analysis. No credit card required for the Free plan.
Frequently Asked Questions
What is included in a scan?
The free tier runs 71 quick scanners — SSL/TLS, DNS, security headers, cookies, email security, technology fingerprinting and more. Paid deep scans run all 272 scanners, adding the full 13,000-template Nuclei pack, the six-scanner WordPress suite, injection testing with value-aware parameter mutation, and OWASP ZAP-class dynamic analysis in the superdeep tier.
What is the difference between a scan and a Deep Scan?
A quick scan covers your external posture with 71 fast scanners and typically finishes in under 15 minutes. A deep scan runs all 272 scanners — including active vulnerability detection — and typically takes 60–90 minutes. Deep scan quotas are separate from standard scan quotas.
Do all findings include exploit intelligence?
Yes. Every CVE-tagged finding is cross-checked against the CISA Known Exploited Vulnerabilities catalog, 25,089 ExploitDB-mapped CVEs and 3,192 Metasploit-mapped CVEs (synced daily), so you can prioritize what is actually being exploited in the wild.
How do I get my reports?
Results appear in your dashboard as soon as a scan finishes, with findings grouped by severity. Professional, Business, and Enterprise plans can also export professional PDF reports — ideal for clients, management, and compliance audits.
What are the Free plan limits?
The Free plan includes 1 scan per month on 1 website with the full quick tier — the same engine the national monitoring program runs. Deep scans, continuous monitoring, and PDF exports require a paid plan. No credit card required.
Can I upgrade or downgrade anytime?
Yes. Plans are billed monthly in USD with no lock-in — upgrade when you need more scans or websites, downgrade or cancel whenever you like.