Pricing that does not hide the numbers.
Start free, forever. Upgrade only when you need more sites, faster checks or longer retention. No card to start, no hidden fees, cancel any time.
Free
Try the full suite on one site, free.
- Monitors
- 5 · Slow
- SSL and domain expiry
- ✓
- Mobile app alerts
- ✓
- Comprehensive reports
- 1 · once
- Continuous scanning
- ✗
- Unlock all fixes
- ✗
- Deep repo scan
- 1 · once
- Local codebase scan
- 5 / month
- API rate-limit rules
- 1
- Compliance suite
- ✗
- Agentic mode and MCP
- ✓
Basic
Monitoring-first, with security scans.
- Monitors
- 30 · Fast
- SSL and domain expiry
- ✓
- Mobile app alerts
- ✓
- Comprehensive reports
- 3 / month
- Continuous scanning
- ✓
- Unlock all fixes
- ✓
- Deep repo scan
- 3 / month
- Local codebase scan
- 30 / month
- API rate-limit rules
- 5
- Compliance suite
- ✗
- Agentic mode and MCP
- ✓
Pro
Full security and monitoring for a live product.
- Monitors
- 50 · Fast
- SSL and domain expiry
- ✓
- Mobile app alerts
- ✓
- Comprehensive reports
- 15 / month
- Continuous scanning
- ✓
- Unlock all fixes
- ✓
- Deep repo scan
- 15 / month
- Local codebase scan
- 100 / month
- API rate-limit rules
- 10
- Compliance suite
- ✓
- Agentic mode and MCP
- ✓
Max
Deep scans and teams for critical apps.
- Monitors
- 100 · Instant
- SSL and domain expiry
- ✓
- Mobile app alerts
- ✓
- Advanced reports
- 30 / month
- Continuous scanning
- ✓
- Unlock all fixes
- ✓
- Deep repo scan
- 30 / month
- Local codebase scan
- Unlimited
- API rate-limit rules
- 50
- Compliance suite
- ✓
- Agentic mode and MCP
- ✓
All plans are per site. Yearly billing saves about 25% (the per-month price above is the yearly rate). AppSumo lifetime deals honored. No hidden fees.
Agency
Advanced security and monitoring for client systems.
- Unlimited sites, monitors & teammates
- SSO · Signed GDPR DPA
- Dedicated edge · bring your own Cloudflare
- 99.99% SLA · incident response any hour
- Named security engineer
Compare every plan, feature by feature.
Everything each plan includes, in plain terms. Hover a feature name for what it means. All plans are per site; yearly billing is about 25% cheaper.
| Feature | Free | Uptime | Pro | Max | Agency |
|---|---|---|---|---|---|
| Monitoring & uptime | |||||
| Uptime checksHow many endpoints, pages or APIs on this site you can watch at once, not extra sites. | 5 | 30 | 50 | 100 | ∞ |
| Monitor typesHTTP, keyword, SSL & domain expiry, TCP port, DNS and cron/heartbeat checks. | HTTP | All | All | All | All |
| Check intervalHow often we re-check. Faster = you hear about downtime sooner. | Slow | Fast | Fast | Instant | Custom |
| Multi-region checksWe confirm from several regions before alerting, so no false alarms. | ✓ | ✓ | ✓ | ✓ | ✓ |
| SSL & domain-expiry alertsWarned before your certificate or domain lapses. | ✓ | ✓ | ✓ | ✓ | ✓ |
| Branded status pageA public status page with your logo, colors and custom domain. | ✓ | ✓ | ✓ | ✓ | ✓ |
| Alert channelsEmail, Slack, Discord, Telegram, webhook and the phone app. | Email + app | All | All | All | All |
| Security & scanning | |||||
| Managed WAFBlocks SQLi, XSS, SSRF and bots with MITRE/OWASP tagged rules. | ✓ | ✓ | ✓ | ✓ | ✓ |
| API rate limitingAuto-detected endpoints capped per route, IP and account. | ✓ | ✓ | ✓ | ✓ | ✓ |
| Active deceptionConfirmed attackers get honeytokens and fakes, not your data. | ✓ | ✓ | ✓ | ✓ | ✓ |
| API rate-limit rulesCustom per-endpoint rate-limit rules you define (per route or per IP). | 1 | 5 | 10 | 50 | ∞ |
| Comprehensive security reportsAn automated pentest that grades your live site. | 1 · once | 3 / mo | 15 / mo | 30 / mo | ∞ |
| Deep pentestPort scan, admin-surface enumeration and a rendered-page crawl. | × | × | × | ✓ | ✓ |
| Deep repo scanScan a connected GitHub/GitLab repo for secrets and flaws. | 1 · once | 3 / mo | 15 / mo | 30 / mo | ∞ |
| File-upload scanningMalware + polyglot detection on files your app accepts. | × | × | × | ✓ | ✓ |
| MCP scans / monthScans run from your AI editor via the MCP server and agent skills. Available on every plan. | 5 | 30 | 100 | Unlimited | Unlimited |
| Compliance, team & data | |||||
| Compliance generatorGDPR, CCPA and cookie policy detection + document drafting. | Check | Check | Full | Full | Full |
| TeammatesExtra people who can log in and manage this site. | — | — | 1 | 4 | ∞ |
| Log retentionHow long attack + uptime history is kept. | 15 days | 60 days | 90 days | 365 days | 365 days |
| SIEM webhook & audit CSVStream events to your SIEM and export an audit log. | × | × | × | ✓ | ✓ |
| SSO (SAML / OIDC)Single sign-on for your whole team. | × | × | × | × | ✓ |
| Signed GDPR DPAA signed data-processing agreement for regulated teams. | × | × | × | × | ✓ |
| SupportHow you reach us when you need help. | Community | Priority | Priority | Named engineer | |
Pricing questions.
Everything about plans and billing. Still unsure? We are one message away.
Yes. The Free tier needs no card and stays free: one site with the managed firewall, uptime monitoring, a one-time pentest, active deception, a public status page and the MCP tools for your AI editor. Upgrade only when you need more.
Each plan covers one site. If you protect several properties, you add a plan per site, or move to Agency for unlimited sites under one account and one price.
Yes. Upgrade, downgrade or cancel whenever you like. Plans are per site, so if you cancel, that site drops to the free tier at the end of the period, its data stays, and only the paid extras switch off. Your other sites are unaffected. You can resubscribe any time.
Yes, AppSumo lifetime redemptions are honored. Redeem your code in the app and the matching plan is applied to your account for life.
Basic is monitoring-focused: all monitor types, expiry alerts and every channel. Pro adds the security side: monthly pentests, repo scanning, full compliance, custom rate-limit rules and a teammate.