Plans that scale with your attack surface.

Plans are tiered by the size of your attack surface: how many targets you monitor, how many scans you run, and whether you want the expert-led pentest program on top. Prices are not published yet; pricing and billing start at general availability. Tell us what you run and we can talk through which plan would fit.

A target is one asset you point the platform at: a domain, an IP address, or a web application URL. Subdomains found by discovery become their own targets only when you add them.

Expert-led engagements are part of the Pentest and Enterprise tiers. Scope, cadence, and depth are agreed in an engagement letter before any testing starts.

OWASP ZAP for web and API testing, Nuclei for CVE and misconfiguration templates, and SSLyze for TLS posture. You can also import Nessus results, and findings from GitHub Dependabot or Snyk (Dependabot and Snyk imports are Enterprise features).

Findings are deduplicated by fingerprint into risks, then AI vetting reviews each batch and marks likely false positives with model attribution. Your team confirms or overrides every verdict; nothing is silently discarded.

Scan history is retained per your plan tier, from 90 days on Scanner to unlimited on Enterprise. You can export your organization data from the platform, and account deletion permanently removes it.

Yes. Targets are verified through a DNS record or a well-known file on the host before active scanning runs. This protects you and everyone else.

Yes, once billing is live. Tiers map to platform limits, and plan changes apply at the next billing cycle. Pricing and billing start at general availability, so there is nothing to change during the pilot.