AI Pentest Agent - Pricing

Choose how deep the agent goes.

Every plan puts specialised AI agents and deterministic security tools on your web application, with verified ownership and findings that come with evidence. Start with Lite and move up as you need authenticated testing, more targets and fuller reports.

Web application pentesting available first

Lite

Best for individuals and small projects

Pricing coming soon

For individuals and small projects that want a fast, safe first look at their web application's security.

Start with Lite

What you get

Black-box (unauthenticated) testing of your web application
OWASP Top 10 check set
Production-safe scan defaults with built-in rate limiting
Ownership verification and rules-of-engagement acceptance before any test runs
In-app findings list with automatic severity ratings
Curated remediation references for every finding
Summary PDF export (watermarked)
Email digest notifications
Help centre and FAQ
2 scans per month

Recommended

Standard

Best for teams that ship regularly

Pricing coming soon

Deeper testing for teams that ship regularly, with authenticated scanning and full reports.

Choose Standard

Everything in Lite, plus

Up to 3 expanded targets, with multi-URL scope per target
Scan exclusions for specific paths and endpoints
Grey-box testing mode
Authenticated scanning (single role)
Full DAST check set
AI-assisted business-logic checks
CVSS scoring on findings
Full OWASP mapping
Full technical PDF report, with unlimited report exports
In-app notifications
Multiple user seats with basic roles
Email support
Weekly scan cadence plus on-demand scans (fair-use cap)

Advanced

Best for complex apps and security-led teams

Pricing coming soon

Full-depth testing for complex applications and security-led teams.

Choose Advanced

Everything in Standard, plus

Up to 10 expanded targets
Multi-role authenticated scanning
TOTP and CAPTCHA handling, so the agent can test behind multi-factor and bot-protected logins
Special instructions and fine-grained scope control
Executive summary report, alongside unlimited full technical reports
Priority support and an onboarding call
Daily scan cadence plus on-demand scans (fair-use cap)

On every plan

Ownership verification
OWASP Top 10 coverage
Production-safe defaults
Findings with auto-severity
Curated remediation references
Email digest notifications

Compare pricing

Every capability, side by side

Higher pricing include everything in the pricing below them.

Swipe left and right to compare plans

Capability	Lite	Standard	Advanced
Targets and scope
Expanded targets	None	Up to 3	Up to 10
Multi-URL scope per target	Not included	Included	Included
Scan exclusions (paths / endpoints)	Not included	Included	Included
Special instructions and fine-grained scope control	Not included	Not included	Included
Grey-box testing mode	Not included	Included	Included
Ownership verification and rules-of-engagement acceptance	Included	Included	Included
Scanning and authentication
Black-box (unauthenticated) scanning	Included	Included	Included
Authenticated scanning, single role	Not included	Included	Included
Multi-role authenticated scanning	Not included	Not included	Included
TOTP and CAPTCHA handling	Not included	Not included	Included
OWASP Top 10 check set	Included	Included	Included
Full DAST check set	Not included	Included	Included
Business-logic checks (AI-assisted)	Not included	Included	Included
Production-safe defaults and rate limiting	Included	Included	Included
Scans	2 per month	Weekly + on-demand (fair use)	Daily + on-demand (fair use)
Findings and risk scoring
In-app findings list with auto-severity	Included	Included	Included
CVSS scoring	Not included	Included	Included
Curated remediation references per finding	Included	Included	Included
Compliance and reporting
Full OWASP mapping	Not included	Included	Included
Report exports	Summary PDF (watermarked)	Unlimited full technical reports	Unlimited full + executive summary reports
Collaboration, access and support
Email digest notifications	Included	Included	Included
In-app notifications	Not included	Included	Included
Multi-user seats and basic roles	Not included	Included	Included
Help centre / FAQ	Included	Included	Included
Email support	Not included	Included	Included
Priority support and onboarding call	Not included	Not included	Included

Questions

Before you start

Do I need to prove I own the target?

Yes, on every plan. Ownership verification and acceptance of the rules of engagement are required before any test runs.

Is it safe to run against a production application?

Every plan uses production-safe scan defaults with built-in rate limiting, so the agent tests without flooding your application.

What is the difference between black-box, grey-box and authenticated scanning?

Black-box testing attacks your application the way an outsider would, with no login. Authenticated scanning tests behind a login, as a signed-in user. Grey-box mode lets the agent test with some knowledge of your application. Lite covers black-box testing. Standard adds grey-box mode and single-role authenticated scanning. Advanced adds multi-role scanning, TOTP and CAPTCHA handling.

Which reports does each plan include?

Lite exports a watermarked summary PDF. Standard includes the full technical PDF report with unlimited exports. Advanced adds an executive summary report.

What support do I get?

Lite includes the help centre and FAQ. Standard adds email support. Advanced adds priority support and an onboarding call.

Start testing

The next pentest doesn't need a meeting.

Choose your target. Define your scope. Launch the test. Let AI agents investigate your application and return validated, evidence-backed findings.

Run Your Pentest →