Continuous External Monitoring

Your $495 external pen test, every week, for $375 a month

$375/month

First two months ($750) billed at signup, then $375 a month. Cancel any time after that.

Start monitoring

Weekly external scans of up to 3 hostnames you verify. Every finding reviewed by a person before it reaches you. No scan runs until your DNS record verifies, which most customers finish within an hour.

What you get

  • Up to 3 hostnames you own (verified by a DNS TXT record)
  • A full external scan every week: open ports, TLS configuration, known CVEs and misconfigurations
  • Every finding reviewed before it reaches you; no raw scanner output
  • Email alert when a new High or Critical issue appears
  • Monthly PDF report and a letter confirming continuous monitoring
  • Two-month minimum, then month to month: cancel any time after that

Annual plan: $3,750 a year

Pay $3,750 upfront for 12 months instead of $4,500 at the monthly rate: two months free. The scope is the same as the monthly plan: a full external scan every week of up to 3 hostnames you verify, every finding reviewed by a person before it reaches you, and an email alert when a new High or Critical issue appears.

  • Paid upfront for 12 months.
  • No auto-renew: the plan renews only if you opt in at the end of the year.
  • Non-refundable. If you want to keep the option to cancel, choose the monthly plan.
Start the annual plan

What it does not cover

  • Logged-in (authenticated) testing of your app or API: quoted separately
  • Manual penetration testing, business logic or access-control testing
  • Internal networks, IP ranges, or hosts you cannot verify
  • Denial-of-service, load, brute-force or social-engineering tests
  • A compliance certification or a guarantee of no vulnerabilities

How it starts

  1. Subscribe and list up to 3 hostnames.
  2. Add one DNS TXT record we show you after checkout. It proves you own the domain; we never scan a host without it, and we check it again before every scan.
  3. Your first scan runs within 15 minutes of the record appearing, then weekly.

Scans are non-intrusive: no denial-of-service, fuzzing or intrusive templates. See how it works.

Billing

  • $375 a month, two-month minimum. The first two months ($750) are billed together at signup and are not refundable, even if you cancel before the second scan runs.
  • From the third month, $375 is billed monthly through Stripe. Cancel any time from your Stripe receipt or by email; scanning continues to the end of the period you paid for.
  • No scan runs until your DNS record verifies, but the minimum term starts at signup. Most customers verify within an hour.
  • Annual plan: $3,750 upfront for 12 months. No auto-renew. Non-refundable.
  • Full terms: Continuous External Monitoring subscription.

$375/month

First two months ($750) billed at signup, then $375 a month. Cancel any time after that.

Start monitoring

Need logged-in testing of your app or API? See authenticated penetration testing.