All prices are in US dollars (USD).
Free
Prove the platform on your first target. No credit card required.
- 1 Target domain
- 3 Scans per month
- 1 Concurrent scan
- 1 Team member (solo)
- Subdomain discovery
- Nuclei vulnerability scanning
- Real-time scan dashboard
- Community support
Starter
For growing pentest teams running continuous assessments.
- 5 Target domains
- 25 Scans per month
- 2 Concurrent scans
- Up to 5 team members
- Subdomain discovery
- Deep scan mode (SQLi, XSS, LFI, RCE)
- Nuclei vulnerability scanning
- Real-time scan dashboard
- PDF executive & technical reports
- Scan scheduling (daily / weekly / monthly)
- Email support
Pro
For mature security teams who need depth, scale, and integrations.
- 25 Target domains
- 150 Scans per month
- 5 Concurrent scans
- Up to 25 team members
- Subdomain discovery
- Deep scan mode (SQLi, XSS, LFI, RCE)
- Nuclei vulnerability scanning
- Real-time scan dashboard
- PDF executive & technical reports
- Scan scheduling (daily / weekly / monthly)
- Webhook alerts (Slack, Discord, Teams)
- Email alerts with PDF attachment
- Priority email support
Enterprise
For large organizations, MSSPs, and teams with compliance requirements.
- Unlimited target domains
- Unlimited scans per month
- Unlimited concurrent scans
- Unlimited team members
- All Pro features included
- Your brand name on PDF reports (set up by our team)
- Custom data retention policies
- Volume licensing for multiple clients
Starter and Pro include a 7-day free trial. Cancel before day 8 — pay nothing. Need a custom plan?
Compare
Full Feature Breakdown
| Feature | Free | Starter | Pro | Enterprise |
|---|---|---|---|---|
| Targets | 1 | 5 | 25 | Unlimited |
| Scans / month | 3 | 25 | 150 | Unlimited |
| Concurrent scans | 1 | 2 | 5 | Unlimited |
| Team members | 1 | 5 | 25 | Unlimited |
| Subdomain discovery | ||||
| Nuclei vulnerability scanning | ||||
| Deep scan mode (SQLi, XSS, RCE) | ||||
| Real-time scan dashboard | ||||
| PDF reports (executive & technical) | ||||
| Scan scheduling | ||||
| Email alerts | ||||
| Webhook alerts (Slack, Discord, Teams) | ||||
| Your brand name on PDF reports (set up by our team) |
FAQ
Pricing Questions
What is a "target"?
A target is a domain you register — for example, acme.com. PentestCheck discovers its subdomains, open ports and HTTP services, and runs vulnerability scans against that domain. Discovered subdomains can be added as their own targets.
Can I upgrade or downgrade anytime?
Yes. Upgrades take effect immediately, with the price difference prorated. Downgrades are billed from your next billing period. Your existing targets and scan history are kept; scheduled scans for targets beyond the new plan's target limit are paused.
Is there a free trial for paid plans?
Starter and Pro plans include a 7-day free trial. A credit card is required to start the trial. Cancel before day 8 and you will not be charged. The Free plan is permanently free — no credit card, no time limit. You can start proving value right now.
What happens when I reach my scan limit?
When you hit your monthly scan limit, additional scan requests are rejected with a clear error message (HTTP 402). Scans already running are not interrupted. Your scan counter resets on the 1st of each month (UTC), and failed scans don't count. You can upgrade at any time to immediately unlock additional capacity.
What currency are prices in?
All prices are in US dollars (USD): Starter is US$59/month and Pro is US$179/month. The Free plan costs nothing.
Still have questions? Contact support
How does PentestCheck compare?
See how our pricing and feature set stacks up against the most popular EASM alternatives.
Start scanning your attack surface today
Free plan — no credit card required. One target, three scans per month, full Nuclei coverage. Upgrade when you need more.