Joomla
Quick profile plus full Joomla security scanner pathway.
Pay Per Scan — No Subscription Lock-In
Vulnerability Scanning Service Pricing
Transparent vulnerability scanning cost: subscription credits or pay-as-you-go packs. Compare tiers, see per-scan pricing, and start free with bonus credits.
Plans
Choose How You Pay
Switch between recurring subscriptions and one-time credit packs.
Applies only if your account does not already have a referral. Not a discount code.
Free
$0/one-time
10 credits one-time
- Basic security reports
- Access to the dashboard and scan history
- Free public tools
- Starter credits included (one Quick scan)
BEST VALUE
Pro
$39/month
100 credits per month
- 100 credits per month
- Rollover up to 200 credits
- Everything in Free
- Scheduled scans (up to 3)
- Email notifications and alerts
Team
$79/month
250 credits per month
- 250 credits per month
- Rollover up to 500 credits
- Everything in Pro
- Team workspaces (up to 10 seats)
- API keys (up to 5)
- White-label reporting controls
Website Watch
Standard $29 per site per month ($290/year) or Deep $49 ($490/year). Daily pulse plus a weekly scan at the locked depth. Credits are not used. Agencies buy one seat per watched origin. Standard and Deep do not share spare seats.
Need Unlimited Scans?
Contact us for enterprise plans with unlimited scans and custom solutions.
Compare
Feature Comparison
What each subscription includes. Website Watch and pentest are sold separately.
Swipe to compare plans
| Feature | Free | ProBest value | Team | Enterprise |
|---|---|---|---|---|
| Credits & Scans | ||||
| Credits included | 10 signup bonus | 100/month | 250/month | Custom |
| Buy extra credits | ||||
| Credit rollover | ||||
| Max rollover | 200 credits | 500 credits | Custom policy | |
| Scheduled scans | Up to 3 | Up to 10 | Unlimited | |
| Reports & Access | ||||
| Dashboard and scan history | ||||
| Free public tools | ||||
| Basic security reports | ||||
| HTML, PDF, TXT, and JSON exports | ||||
| Compliance mappings on completed scans | ||||
| Email scan notifications | ||||
| Team & Automation | ||||
| Organization workspace | Owner only | Owner only | Up to 10 seats | Unlimited seats |
| Outbound webhooks | ||||
| Slack and Jira integrations | ||||
| API keys | Up to 5 | Unlimited | ||
| White-label report controls | ||||
| 14-day client report links | ||||
Platforms
Joomla, Shopify, And WordPress Teams
Platform-specific teams can start with free quick profiles and unlock comprehensive mode through account-backed workflows.
Shopify
Storefront checks and Shopify-focused security workflows.
WordPress
WordPress footprint checks and deeper account-backed scans.
FAQ
Vulnerability Scanning Pricing FAQ
Common questions about vulnerability scanning cost, credits, and plan changes.
vulnerability scanning service pricing
Vulnify uses pay-per-scan credits instead of opaque annual licenses. Subscriptions bundle monthly credits with rollover caps; pay-as-you-go packs let you buy credits when you need them. A standard scan costs 18 credits — compare live tiers above.
vulnerability scanning cost
Vulnerability scanning cost depends on scan depth and credit packs. Start free with signup bonus credits, then choose subscription tiers or one-time bundles. No long-term contract — you pay for scans you actually run.
vulnerability scanning pricing
Vulnify vulnerability scanning pricing is listed transparently on this page: subscription monthly credits versus pay-as-you-go packs, with per-scan credit cost shown for each tier.
vulnerability scanner pricing
Vulnerability scanner pricing is credit-based — free public SSL, headers, and DNS tools need no signup; full OWASP-aligned scans use credits from subscriptions or purchased packs.
network vulnerability scanning pricing
Vulnify pricing covers website and web application scanning. For internal network appliance licensing, teams often pair Vulnify DAST with dedicated network scanners — compare credit tiers here for internet-facing app coverage.
continuous vulnerability scanning pricing
Website Watch is Standard $29 or Deep $49 per site per month ($290 or $490 yearly) for daily pulse plus a weekly scan at the depth you lock at checkout. Scheduled scans stay on credits for custom cadence and Comprehensive.
What happens to unused credits?
Subscription credits roll over to the next month up to the plan cap. For example, if you have a Pro plan and use 10 of your 100 monthly credits, the remaining 90 can roll over, giving you up to 190 available credits next month.
Can I switch plans anytime?
Yes! You can upgrade or downgrade your plan at any time. Upgrades take effect immediately with prorated charges. Downgrades take effect at the end of your current billing period.
Do purchased credits expire?
No! Credits purchased through credit packages never expire. Only subscription credits have a rollover limit (2 months). You can mix subscription and purchased credits.
Can I buy extra credits if I run out?
Absolutely! Even with a subscription, you can purchase additional credit packages anytime. These credits never expire and can be used alongside your subscription credits.
What payment methods do you accept?
We accept all major credit cards (Visa, Mastercard, American Express) through our secure payment processor, Stripe. All transactions are encrypted and secure.
How do I cancel my subscription?
You can cancel anytime from your Dashboard under Billing settings. Your subscription will remain active until the end of your billing period, and you will keep all remaining credits.
Premium
Penetration Test Options
Pay, consent, verify, confirm the engagement plan, then receive HTML and PDF. Reports are usually ready 30 to 60 minutes after testing starts. Included retests depend on the tier you order.
Wrapped industry engines
The same catalog wraps Nuclei, OWASP ZAP, SQLMap, and Playwright. Vulnify owns confirmation, evidence, and the report. These names are not partner badges.
- Nuclei
- OWASP ZAP
- SQLMap
- Playwright
Names identify software we wrap. No affiliation or endorsement.
Penetration Test
$297
Automated evidence-backed testing with HTML, PDF, and one included retest
- Verified target and authorization consent before testing
- Review and confirm the automated engagement plan
- Usually 30 to 60 minutes after testing starts
- HTML and PDF with a do-this-week list and ticket-ready findings
- One included targeted retest with before and after evidence
- Full refund until testing starts
- Optional authenticated checks with a saved healthy scanner profile
Comprehensive Pentest
$497
Everything in Pen Test plus extra engines, up to five extra verified hosts tested, a two-role matrix, a detailed, actionable PDF for security specialists and developers, and two retests
- Everything in the $297 Penetration Test
- Extra engines: GraphQL, JWT, template injection, NoSQL, XXE, and public-repo secret scanning
- Up to 5 extra verified hosts tested after you prove control
- Two-role authorization matrix when two profiles are supplied
- Attack-surface appendix in the report
- Detailed, actionable PDF plus HTML for specialists and developers
- Two included targeted retest cycles
- Ticket-ready remediation
- Auditor-ready evidence pack (not a certificate)
Explore
See What You Are Pricing
Review scanner capabilities and platform features before you choose a credit tier.
Partners
Affiliate Program
Enroll from your account, complete Stripe Connect, share a readable partner code, and get paid through Stripe.
Earn 20% on qualifying referrals
Sign in, enroll, then complete Stripe Connect before you can receive payouts. You get a partner code plus a shareable ?ref= link. Rewards apply to the first Pro or Team subscription and the first credit-pack purchase from each referred account. Clicks count for 90 days. Watch and pentest are not included.
Enroll
Create or sign in to a Vulnify account, then enroll in the portal. Enrollment starts at a 20% payout rate. Stripe Connect is still required before you can be paid.
Connect Stripe
Stripe Connect is required to be a paid affiliate. Complete Stripe identity and bank setup from the portal. Rewards stay pending for 30 days, then pay out once your approved balance reaches $50.
Share
Send your referral link or a vanity code people can type at signup. The first touch is attributed to you for 90 days. Self-referrals are blocked.
What qualifies
- First Pro or Team subscription from a referred account
- First credit-pack purchase from a referred account
- Default reward is 20% of that qualifying purchase
- Clicks count for 90 days from first touch
What the portal shows
- Partner code, vanity code, and live referral link
- Pending, approved, paid, and referred-revenue totals
- Stripe Connect status — required before payouts
Ready To Start Scanning?
Create a free account for starter credits, or pick a plan that matches your workflow.