TRANSPARENT ENTERPRISE PRICING
Autonomous Attack Surface Defense for Every Organization
Start with free on-demand scans. Upgrade for continuous monitoring, deep API discovery, drift tracking, and automated CI/CD pipeline integration.
Starter
Try WebDefect on your first website
$0
1 permanent domain
- 1 free Basic Scan
- Security Score
- Core security findings
- Basic report (PDF)
- 645 security checks
Most Popular
Pro
For individuals and small teams
$19/ month
Billed monthly
Up to 5 permanent domains
- Basic Scan
- Advanced Security Test
- Full security dashboard
- Security findings
- Attack Surface analysis
- Security Changes
- Risk & prioritization
- Verification
- Technology & dependency intelligence
- API and JavaScript security
- Authentication & session assessment
- Full reports and history
Business
For agencies and growing organizations
$59/ month
Billed monthly
Up to 30 permanent domains
- Everything in Pro
- Advanced Security Test at scale
- Full security dashboard
- Full reports and history
- Attack Surface analysis
- Security Changes
- Risk & prioritization
- Verification
- Technology & dependency intelligence
- API and JavaScript security
- Authentication & session security
- Team and organization capabilities
- API and integration capabilities
- Priority support
Enterprise
For large organizations with custom requirements
Custom
Unlimited domains*
- Unlimited domains*
- Advanced Security Test at enterprise scale
- Full security dashboard
- Full reports and history
- Team and organization management
- API and integration capabilities
- Custom security requirements
- Dedicated support and SLA
- Enterprise controls
DETAILED FEATURE BREAKDOWN
Plan Capability Matrix
Compare specific module limits, reporting capabilities, and integrations across tiers.
| Inspection Capability | Starter | Pro | Business | Enterprise |
|---|---|---|---|---|
| Price | Free | $19/mo | $59/mo | Custom |
| Permanent domains | 1 | 5 | 30 | Unlimited* |
| Basic Scan | ||||
| Advanced Security Test | ||||
| Security Dashboard | Basic | Full | Full | Full |
| Security Findings | ||||
| Attack Surface | ||||
| Security Changes | ||||
| Verification | ||||
| Reports | Basic | Full | Full | Custom |
| Team Features | ||||
| API / Integrations | ||||
| Support | Self-service | Standard | Priority | Custom SLA |
CLEAR ANSWERS
Frequently Asked Questions
What does a scan include?
Every scan runs 645 distinct automated checks across 17 modules covering TLS 1.3, DNSSEC, security headers, CSP Level 3, HSTS, cookies, CORS, JavaScript bundles, dependencies, sensitive file discovery (/.git, /.env), API endpoints, form security, information disclosure, and error leakage.
What is the difference between a Basic Scan and an Advanced Security Test?
A Basic Scan is a rapid perimeter audit delivering ratings in under 60 seconds. An Advanced Security Test is an exhaustive assessment with multi-phase deep asset mapping, drift detection against historic baselines, active 2-stage verification re-probes, and risk-prioritized remediation.
What does 'permanent domain' mean?
Each plan includes a dedicated allocation of continuous domain monitoring slots. Once assigned, domains receive scheduled daily tracking and telemetry drift alerts. This prevents quota churning while maintaining historical compliance audit trails.
Do I need an account to scan?
No. You can run up to 1 free Basic Scan without creating an account. Creating an account gives you access to a Starter tier with saved history and persistent domain tracking.
Is scanning safe and non-destructive?
Yes, 100%. WebDefect strictly operates on passive, read-only RFC-compliant inspection probes. No exploits are executed, no database modifications are attempted, and no traffic load spikes are created.
How does yearly billing work?
Yearly billing is discounted by 20% compared to monthly subscriptions. You can manage, upgrade, or cancel your subscription at any time through your account portal.
Can I scan any website?
You should only audit domains or infrastructure that you own or have explicit written authorization to evaluate in accordance with our terms of service.