Simple, Transparent Pricing

An asset is one item the platform can scan or monitor: a public IP address, a hostname, a web application, an internal subnet target, a cloud account or a Kubernetes cluster. Each cloud account counts as one asset and each Kubernetes cluster counts as one asset, no matter how many resources or nodes sit inside them. That is what asset-wise pricing means in practice: you pay for the scope you put under test, not for seats, scanners or per-tool licences.

All paid plans start with a 7-day free trial. No charge for 7 days: a card is required to start your trial and is only charged after the trial ends, unless you cancel first. You get the tier you selected for the whole trial, so you can run real assessments against your own assets rather than a sandbox. Pick a tier and start a trial, or run a free demo scan first if you would rather see output before signing up.

Scans against the assets in your plan are unlimited within fair use, so testing weekly costs the same as testing once a quarter. That is deliberate: the point of continuous penetration testing is to retest after every change, and a per-scan meter would push you to test less. Fair use exists only to stop a single tenant monopolising shared capacity; if your programme is unusually scan-heavy, talk to us and we will size the right tier with you.

Cloud posture auditing is included from the Professional tier and covers AWS, Azure, GCP and M365 with 800+ automated checks plus CIS Benchmark coverage. Kubernetes auditing is agentless and works on GKE (including Autopilot), EKS (including Fargate), AKS, OpenShift, k3s and self-managed or on-prem clusters. Neither needs the on-prem agent: cloud auditing uses read-only credentials you issue, and Kubernetes uses a customer-supplied read-only kubeconfig with no DaemonSet to install. Each account or cluster counts as one asset.

Yes. Upgrades take effect immediately, so the extra capability and asset quota are available as soon as the change is confirmed. Downgrades take effect at the start of your next billing cycle, which keeps the tier you already paid for running until that period ends. You can also switch between monthly and annual billing; annual saves around 25 percent against the equivalent monthly rate.

Nothing breaks and nothing stops scanning. Once you pass the included quota you pay for each additional asset at your tier's overage rate. The portal shows a live asset counter and warns you before any additional charge applies, so an overage is always a decision you make rather than a surprise on an invoice. If you are consistently paying overage, moving up a tier is usually the cheaper option, and upgrades take effect immediately.

All major credit cards, ACH bank transfers, and wire transfers for enterprise customers. Invoicing is available for annual plans. Card payments and billing are processed by our payment sub-processor, which is listed in the Trust Centre. Enterprise agreements can also be set up with invoicing, an MSA and a signed DPA; ask us through sales.

Enterprise is sales-led because the scope varies: dedicated infrastructure, custom integrations, an on-premise deployment option, SLA terms, custom retention, data-residency arrangements, SSO and a dedicated account manager. The Partner and MSP programme is separate again, with its own tiers, so you can white-label or resell asset-wise testing with a fully isolated environment per client. Talk to sales or apply to the partner programme.