Two live levels: a $297 Penetration Test core catalog and a $497 Comprehensive Pentest. Engines record proof when a check succeeds and mark the check not applicable when preconditions are unmet — never a guessed finding, never a human consultant, never a certification stamp.
Vulnify wraps Nuclei, OWASP ZAP, SQLMap, Playwright, httpx, and katana inside a published check catalog. Vulnify owns confirmation, evidence, and the report. These vendors are not partners and do not certify the assessment.
Names identify software we wrap. No affiliation or endorsement.
The public catalog is the same check set the worker plane runs after you pay, verify the hostname, and confirm the engagement plan.
Each check has a family, a required-or-recommended level, and a severity cap. A finding is stored only when the engine captured proof. If authentication, object IDs, or another precondition is missing, the result is not applicable.
The $297 Penetration Test runs Penetration Test core. The $497 Comprehensive Pentest includes that core, then adds extra engines, a verify-then-test cap of five extra hosts, deeper API authorization, and a two-role matrix when two profiles are supplied.
Pay, consent, verify, confirm the engagement plan, then receive HTML and PDF. Reports are usually ready 30 to 60 minutes after testing starts. Included retests depend on the tier you order.
$297
Automated evidence-backed testing with HTML, PDF, and one included retest
$497
Everything in Pen Test plus extra engines, up to five extra verified hosts tested, a two-role matrix, a detailed, actionable PDF for security specialists and developers, and two retests
Active testing starts only after payment, authorization, hostname verification, and plan confirmation. You can start immediately or schedule a start window.
Choose the $297 Penetration Test or the $497 Comprehensive Pentest, then confirm you own or are authorized to test the hostname.
Prove control of the primary hostname before any active testing starts. Comprehensive extra hosts stay out of scope until you verify them or continue with the primary hostname only.
A healthy scanner login profile enables authenticated families. Skip it and those checks are not tested. Comprehensive can add a second profile for the two-role matrix.
Review the automated engagement plan. Active engines do not start until you confirm. You can start immediately or set a start window with timezone and blackouts. Full refund remains available until engines start.
The worker plane runs the published checks and delivers HTML and PDF with a do-this-week list, numbered remediation, and color-coded severity. There is no score circle and no PCI, SOC 2, or ISO badge. Included retests depend on the tier.
These checks ship with every $297 Penetration Test. The $497 Comprehensive Pentest runs this catalog plus the extras below.
Unable to load the published check catalog.
| Check | Family | Level | Severity cap |
|---|
Automated evidence-backed testing — not a human consultant or compliance certification.
Vulnify does not send a human tester, does not issue ISO or PCI certificates, and does not invent vulnerabilities to fill a report. Use this page to compare the two live levels, then order from premium assessments or review pricing.
Clear answers about the published catalog, the $297 and $497 levels, and when a check is marked not applicable.
It is an evidence-backed, hands-off assessment of a hostname you own or are authorized to test. Engines run a published check catalog, record proof when a check succeeds, and mark a check as not applicable when preconditions are unmet. It is not a human consultant engagement and not a compliance certification.