# WebScanify Pricing & Plans

Pay for domains, not seats. One flat price per domain - no team fees, no forced subscriptions.

## Plans & Pricing Tiers

### 1. Starter Plan - $149 USD
- **Validity**: 1 Month License Validity
- **Domain Quota**: 1 registered scan target
- **Full Security Scan**: 1 Initial Deep Scan (30+ security checks)
- **Rescan Allowance**: 2 Rescans Included / Month (3 Total Scans)
- **Verify Fix**: Re-tests for supported findings (does not consume full scan credits)
- **Features**: Full 8-Framework Compliance Suite (OWASP, PCI DSS v4, GDPR, SOC 2, NIST, ISO 27001, CCPA, FedRAMP), AI Analysis & Remediation Guidance (Groq Llama-3), PDF/HTML/JSON reports.

### 2. Professional Plan - $399 USD
- **Validity**: 3 Months License Validity
- **Domain Quota**: Up to 3 Domains
- **Full Security Scan**: Full Deep Scan (30+ security checks)
- **Scan Allowance**: Up to 3 scans / target / calendar month
- **Verify Fix**: Unlimited 1-click retests
- **Features**: Full 8-Framework Compliance Suite, Multi-Domain Dashboard, AI Guidance, PDF/HTML/JSON reports.

### 3. Growth Plan (Most Popular / Best Value) - $899 USD
- **Validity**: 6 Months License Validity
- **Domain Quota**: Up to 5 Domains
- **Full Security Scan**: Full Deep Scan (30+ security checks)
- **Scan Allowance**: Up to 4 scans / target / calendar month
- **Verify Fix**: Unlimited 1-click retests
- **Features**: Full 8-Framework Compliance Suite, Multi-Domain Dashboard, Priority AI Remediation.

### 4. Custom / Scale Plan - Starting at $1,999 USD
- **Validity**: 1 Year License Validity
- **Domain Quota**: 6 to 20+ Domains (Configurable via dynamic slider, $150 / ₹2,000 per domain above 6)
- **Full Security Scans & Rescans**: Unlimited for 1 Year
- **Verify Fix**: Unlimited 1-click retests
- **Features**: Full Compliance Suite, Agency Management Dashboard, Priority Support.

## Verification Mechanics & FAQs
- **Rescans**: Allowances reset on the 1st of each calendar month for ongoing attack surface monitoring.
- **Verify Fix**: Re-runs supported checks on individual findings without consuming a full scan quota.
- **Target Counting**: Slots are associated with registered scan hostnames. Inputs without www are currently normalized by adding www; previously registered names may match their www equivalent. Other hostnames are not automatically registered scan targets.
- **Scope**: Page discovery and checks are bounded. Related DNS, subdomain or service checks may examine other assets; permission must cover all tested assets.
- **Compliance**: Maps selected technical observations, not an audit or certification.
- **Authorization**: Permission required for all assets tested.