Pricing

No. Each plan is a flat monthly or yearly price with a set number of domains, and systems per domain, included. Discovery finding more of your estate never changes the bill, and going over a limit is never charged as an overage: the action is simply declined until you choose to upgrade. Your cost for the year is known the day you buy.

No. The 7-day free trial needs no card; you only add a payment method when you decide to keep the service. Reports generated during the trial carry a trial watermark, which subscribing removes.

A domain your organization owns (such as example.com) and everything under it (www.example.com, shop.example.com and so on). Each plan includes a number of monitored systems per domain: 20 on Starter, 100 on Growth, 250 on MSP and 1,000 on Enterprise. That covers the ones you add yourself and the ones Attack Surface Scan discovers for you. Systems never use up domain slots.

How much is watched and how often, not what is checked. Every plan runs every check. Higher plans add more domains and systems, daily rather than weekly scheduled checks, more frequent certificate checks, more team seats, lookalike-domain monitoring, the REST API (Growth and above) and, on MSP, white-label reports and client workspaces.

New certificates issued for your domains, including ones you did not authorize, are picked up within about 15 minutes on every plan. Certificates already in use are re-checked daily on Starter and four times a day on Growth and above. Full scheduled checks run weekly on Starter and daily on Growth and above, and urgent changes are sent to your alert channels the moment they are found.

Yes. Upgrades, downgrades and cancellation are all self-serve from the billing portal, and cancellation takes effect at the end of the paid period. Your history stays readable even without an active plan.

Self-serve plans are billed in advance, monthly or yearly, by card or another common payment method at checkout. We never see or store card numbers. We give at least 30 days' notice of any price change. The terms of service and privacy policy are public, and Enterprise terms (single sign-on, a countersigned authorization-to-scan agreement) are arranged through sales.

Nothing is installed and nobody needs network access. Attack Surface Scan only looks at what is already public, only under domains you prove you own, and only reads: no logins, no attack traffic, nothing that could disrupt a live system. Your engineers can read exactly how in the documentation.

Yes. Checkout detects your location and presents fixed AUD pricing if you are in Australia. Starter is A$39 per month, Growth is A$79 per month, and MSP is A$229 per month, with yearly billing set at ten months for twelve. Buyers elsewhere are billed in the USD amounts shown above.