Every plan runs the same scanner and the same rule engine. What changes is how many applications are watched at once, how often they are scanned, and how long the trail is kept.
Drag to see the cheapest plan that covers them.
Three applications, weekly scans, containment on. Enough to find out whether this is worth paying for.
₦1,500 / $1 per live application a month above the free three. No bundle, no seats you cannot use.
Twelve applications, daily scans and the full rule engine.
Sixty sites on one invoice, with reports you can hand to a client.
A hundred and twenty sites, the same terms, a named contact.
An application with no report for seven days goes to sleep. It stops counting against your live applications and stops being billed. One click wakes it.
| Free | Metered | Guard | Agency | Agency+ | |
|---|---|---|---|---|---|
| Live applications | 3 | Any number | 12 | 60 | 120 |
| Scans | Every 7 days | Daily | Daily | Daily | Daily |
| Virtual patches | ✓ | ✓ | ✓ | ✓ | ✓ |
| Request blocking | — | ✓ | ✓ | ✓ | ✓ |
| Email alerts | ✓ | ✓ | ✓ | ✓ | ✓ |
| Incident history | 7 days | 90 days | 90 days | 365 days | 365 days |
| White-label client reports | — | — | — | ✓ | ✓ |
| Priority support | — | — | — | ✓ | ✓ |
| One invoice | — | ✓ | — | ✓ | ✓ |
| Named contact for onboarding | — | — | — | — | ✓ |
Three live applications, scanned weekly, with containment on. Containment is the point: a free tier that will not virtual-patch anything teaches a new user nothing. It is tight where it costs us and where it sells the paid plan: no request blocking, seven days of history, weekly rather than daily scans. Quiet apps go to sleep, and an app that is asleep is not one of your three. The free plan is for getting started, not for production. There is no uptime promise on it and no priority queue: free scans wait for an off-peak slot.
A dependency scan against OSV for npm, Composer, PyPI, RubyGems, crates.io and Go modules, prioritised by whether the vulnerable code is actually reachable. Virtual patches for findings that have no fixed release. An agent that reports inventory without sending your source code. And email that tells you what was found and what was done about it.
Seats. Invite everyone who needs to look. Also free: the public lockfile checker, so
you can scan a composer.lock or package-lock.json without an
account, forever, because the point is that the long tail gets looked at.
Cards are settled in dollars through Bachs at a fixed 1,500 naira to the dollar. One processing line is added at checkout, at cost, never per application. Customers in the EU and UK do not see that line, because charging consumers for using a card is not allowed there. Payments are in test mode on this deployment.
No card needed for the free plan.