Pay for targets, not seats

Plans provide registered target slots - no seat licenses. Choose the number of targets you need.

AI Advisor Included Multi-Target Scanning Target-Based Plans Dynamic Trust Badge Included Compliance PDF Reports Secure Checkout
Starter
Pre-launch check or one-off compliance report
$149
1 Month Validity · 1 Target
Run security scans on a registered target. Good for pre-launch reviews, compliance readiness checks, or a one-off assessment.
  • Full Security Scan (30+ checks)
  • 2 Rescans Included / Month (3 Total)
  • Unlimited 1-click "Verify Fix" checks
  • AI analysis & fix guidance
  • PDF, HTML & JSON reports
  • Full compliance suite mapping
  • Multi-target dashboard
Professional
For founders managing a small site portfolio
$399
3 Months Validity · Up to 3 Targets
Best for small portfolios or multi-site startups. Keep all your core sites scanned and monitored from a single account.
  • Full Security Scan (30+ checks)
  • Up to 3 Scans / Target / Calendar Month
  • Unlimited 1-click "Verify Fix" checks
  • AI analysis & fix guidance
  • PDF, HTML & JSON reports
  • Full compliance suite mapping
  • Multi-target dashboard
Most Popular
Growth Best Value
Built for agencies auditing client websites
$899
6 Months Validity · Up to 5 Targets
Perfect for agencies, growing brands, or web developers managing multiple client projects securely.
  • Full Security Scan (30+ checks)
  • Up to 4 Scans / Target / Calendar Month
  • Unlimited 1-click "Verify Fix" checks
  • AI analysis & fix guidance
  • PDF, HTML & JSON reports
  • Full compliance suite mapping
  • Multi-target dashboard
Custom / Scale
Scale across your entire client portfolio
$1,999
1 Year Validity · 6 Targets
Scale your scan coverage dynamically. Adjust the slider to match your exact count from 6 to 20 targets.
  • Full Security Scan (30+ checks)
  • Unlimited Rescans / Month (∞)
  • Unlimited 1-click "Verify Fix" checks
  • AI analysis & fix guidance
  • PDF, HTML & JSON reports
  • Full compliance suite mapping
  • Multi-target dashboard

Payments processed securely.  |  Pricing in USD.

What's included in every plan

Paid plans include automated security checks and reports. Coverage, AI availability and evidence depend on the target and scan configuration.
AI Security Advisor6-stage automated analysis powered by our Customized AI with attack chain correlation and prioritized code fixes.
Security Checks & Active TestsChecks include SSL, ports, DNS and CVE indicators. Some active tests may provide evidence; a finding or suggested attack chain does not necessarily prove exploitation.
1-Click "Verify Fix" Re-testsRe-run supported checks on individual findings without using a full scan quota. Results are limited to the specific check performed.
8 Compliance FrameworksSelected external technical indicators mapped to OWASP, PCI DSS, GDPR, SOC 2, NIST, ISO 27001, CCPA and FedRAMP. Not an audit or certification; internal and organizational controls need separate review.
Dynamic Live Trust BadgesEmbeddable live SVG/JS security badges for your site footer showing verified security status (A+ Grade).
Multi-Format & SARIF CI/CD ExportDownload polished executive PDF reports, Word DOCX, JSON, and SARIF for direct GitHub & GitLab Security tab import.
JavaScript Secret & Key Leak FinderScans client JS bundles for leaked AWS keys, Google API tokens, Firebase configs, private keys, and Stripe secrets.
API & GraphQL / Swagger AuditDiscovers REST endpoints, GraphQL (/graphql), and Swagger schemas to audit for broken auth and parameter pollution.
Dark Web & Brand Typosquat MonitorChecks HaveIBeenPwned breaches, URLhaus threat intel, and probes typosquatted phishing domains.
Authenticated ScanningSupported checks can use supplied credentials; coverage depends on the target and login method.

Common questions

What are "Rescans" and how do monthly scan limits work?
When you register a target, your plan provides a monthly scan allowance. The count resets on the 1st of each calendar month. Supported "Verify Fix" re-tests do not use a full scan quota.
What counts as "one target"?
A slot is associated with a registered scan hostname. Inputs without www are currently normalized by adding www; previously registered names may match their www equivalent. Other hostnames are not automatically included as separately registered scan targets. DNS and subdomain discovery may examine related names; page coverage and module scope vary.
Do I need permission to scan a site?
Yes - for every scan, free or paid. You must own the domain or hold explicit written authorisation from the owner before scanning. This applies to all scan types. WebScanify is for authorised security testing only.
Can I add more targets later?
You can purchase additional target packages. The account limit is updated after payment is confirmed.
What is the AI Security Advisor, exactly?
When available, the AI advisor can suggest additional checks, correlate findings and generate remediation guidance. Its suggestions and attack chains are not proof of exploitation and should be independently verified; AI availability and output may vary.
Is this different from a penetration test?
Yes. WebScanify runs automated checks and can miss issues or report false positives. A human penetration test can investigate business logic and custom attack scenarios that automated checks may not cover.

Not sure which plan fits? Run a free scan first

Try a Free Scan