Pricing
Start free. Upgrade when you launch.
Every plan includes the free passive check. Paid plans unlock authenticated, backend and code scans, plus fixes for every finding.
Plans
Free
See what an attacker sees.
$0 forever
- 1 project, 1 verified web target
- Passive Quick Check (5/day)
- Weekly passive monitor
- Top 3 fix prompts
- 30 days of score history
Builder
For your first real launch.
$29 /month
- 3 projects
- 30 Standard scans/mo (authenticated + repo + backend)
- Daily passive monitoring
- Every fix prompt + Fix Pack
- Email alerts
Pro
Most popularContinuous red teaming.
$79 /month
- 10 projects
- 60 Deep scans/mo (injection, AI/LLM, write tests)
- Deploy-triggered scans
- Fix PRs on GitHub
- MCP, API & GitHub Action
- Slack, Discord, webhooks
- PDF reports + Trust Page
Agency
Every client app, one rampart.
$249 /month
- 50 projects
- Client workspaces + client viewers
- White-label reports & Trust Pages
- 5 seats included
- Everything in Pro
One-time
Launch Audit · $99
One Deep + Lawsuit-risk scan, a Launch Readiness Report PDF, and 30 days of re-tests while you fix. Fully refundable until the scan starts.
Paid plans renew automatically until cancelled. Prices exclude tax. See our Subscription Terms and Refund Policy.
FAQ
Billing questions
Can I cancel anytime?
Yes, online from Settings → Billing. Cancellation takes effect at the end of your billing period and we email a confirmation.
Do plans renew automatically?
Yes. Paid plans renew at the then-current price until you cancel. Annual subscribers get a reminder 30 days before renewal.
What happens if I downgrade?
Your data is kept. Projects over your new plan's limit become read-only.
Is the Launch Audit refundable?
Fully, until its scan starts. Annual plans cancelled within 14 days are refunded in full.
Is this a pentest?
No. It's automated testing that catches the most common, most damaging issues. For high-risk apps we still recommend a human pentest.
Are prices shown with tax?
Prices exclude applicable tax, which is calculated at checkout.
Automated testing finds common and high-impact issues. It can't prove an app is secure and isn't a substitute for a professional penetration test.
