Start free. Stay checked. Go deep when it counts.
One passive scan tells you where you stand today. The rest of the ladder keeps you there, honestly. No live-monitoring theater: scheduled re-scans on the cadence you pick, and the deep active tests run only after you verify you own the domain.
Free scan
$0
A one-time passive scan of your public surface. Useful once. It can't tell you when something changes.
Monitoring
from $19/mo · site
We re-scan your site on your schedule and email you when a scan finds something new.
New signups are paused. We are moving to a new billing home. Leave your email. You get first access when it opens.
Agency
$499/mo + per site
Sell monitoring under your own brand: reports, alerts, and badges all wear your name. As low as $9 per client site, graduated; billing scales automatically as you add domains. New signups are paused while we move to a new billing home.
Human audit
$5,000one-off
The anchor: a person tests the logic a scanner and agent can't (IDOR, auth bypass, business logic). One report, no upsell.
Compare what's included
Free
- One-time passive scanIncluded
- Every finding, with evidenceIncluded
- Every fix and the PDFyour email
- Scheduled re-scansNot included
- New-exposure alertsNot included
- Your brand on every deliverableNot included
- Sites covered1 at a time
- Active tests: IDOR / auth / RLSNot included
- AI agentNot included
- Price$0
Monitoring
- One-time passive scanIncluded
- Every finding, with evidenceIncluded
- Every fix and the PDFIncluded
- Scheduled re-scansIncluded
- New-exposure alertsIncluded
- Your brand on every deliverableNot included
- Sites coveredper site
- Active tests: IDOR / auth / RLSsoon
- AI agentsoon
- Pricefrom $19/mo · site
Agency
- One-time passive scanIncluded
- Every finding, with evidenceIncluded
- Every fix and the PDFIncluded
- Scheduled re-scansIncluded
- New-exposure alertsIncluded
- Your brand on every deliverableIncluded
- Sites coveredper client site
- Active tests: IDOR / auth / RLSsoon
- AI agentsoon
- Price$499 + $9–18/site
| Free | Monitoring | Agency | |
|---|---|---|---|
| One-time passive scan | Included | Included | Included |
| Every finding, with evidence | Included | Included | Included |
| Every fix and the PDF | your email | Included | Included |
| Scheduled re-scans | Not included | Included | Included |
| New-exposure alerts | Not included | Included | Included |
| Your brand on every deliverable | Not included | Not included | Included |
| Sites covered | 1 at a time | per site | per client site |
| Active tests: IDOR / auth / RLS | Not included | soon | soon |
| AI agent | Not included | soon | soon |
| Price | $0 | from $19/mo · site | $499 + $9–18/site |
Key: soon means verify-gated and rolling out to paid plans. On the free scan the top finding's fix is shown outright; “your email” means the rest of the fixes and the PDF are sent when you leave an email on the report. No account, no card. The human audit ($5,000) is a separate one-off, so it sits outside this plan comparison.