Free scans cover one page at a time. Pro plans deploy an AI agent that crawls your entire site - following threads, analysing scripts, and mapping your full security exposure.
Pricing
What you unlock
AI Investigation
The agent crawls your entire site, running all 8 scan layers on every page it decides is worth investigating - not just the URL you paste.
AI Investigation
AI-written remediation steps specific to each finding. Tells your developer exactly what file to change, what to add, and why.
AI Investigation
Watch the agent explain every decision in real time. Each step is logged with the finding that triggered it - useful as an audit trail.
AI Investigation
When an exposed .map file is found, the agent fetches it and reconstructs original source to check for hardcoded secrets and architecture leaks.
Automation
Set a weekly, monthly, or quarterly cadence. Scans run automatically - never miss a security check-in for SOC2 or ISO 27001 again.
Automation
Get notified when a scan completes or when a new critical finding appears. Act on security issues before your next scheduled review.
Reports
Timestamped, formatted PDFs with your scan details and findings. Accepted by auditors as SOC2 and ISO 27001 evidence.
Reports
Side-by-side diff between any two scans of the same site. Show auditors exactly which findings have been resolved and which are new.
Compliance
Findings automatically tagged to ISO 27001 Annex A controls and SOC2 Trust Services Criteria. Filter your report by control.
Platform Security
The Supabase, Lovable, and Base44 misconfiguration scan runs on every scheduled scan too, so you get alerted the moment a database table becomes publicly exposed after a deploy - not just when you remember to check.
Enterprise
Beyond passive observation, Enterprise scans actively probe your site with safe, non-destructive tests - forced browsing, reflected-input canaries, CORS and HTTP-method checks, and more - plus an independent Active Testing Score that sits alongside the Enterprise plan's own full agent-scan score. Enable it per scan, from the dashboard or via API/MCP.
Free tier
Pro - everything above, plus