Simple, honest pricing

Passive scans are free forever. Deeper checks require you to prove you own the domain — for everyone's protection.

Free
$0/ forever
  • Unlimited passive scans on any site
  • 40+ platform detectors (Supabase, Firebase, Bubble, Base44, etc.)
  • Full evidence — real keys, real data shown
  • Attack walkthroughs on every finding
  • Ethical tier system (never creates accounts, never writes)
Start scanning
Pro
Soon
Coming soon
  • Everything in Free
  • Verified-ownership scans (GraphQL introspection, DB sampling, 100 rows/table)
  • Continuous monitoring + email alerts on new criticals
  • Weekly digest emails
  • Fix verification loop
  • Compliance reports (SOC 2 / GDPR / PCI / HIPAA)
  • Public API + webhooks
  • Priority support
Join waitlist
Team
Coming soon
  • Everything in Pro
  • Multi-seat organizations with roles
  • GitHub integration + PR comments
  • Shared scan history
  • SSO (SAML / OIDC)
  • Data residency controls
  • Dedicated Slack channel
Contact us

All plans include our ethical scanning guarantee: no fake accounts, no database writes, no credential brute-force. See our ethics policy.