Pricing
Continuous penetration testing, priced by the month
A traditional pentest engagement typically runs $15,000 to $150,000+, once. EdgeBreach plans start at $299 a month.
Startup
$299/mo
For small teams that build and ship their own software.
Start free trial- 1 pen test scan per week (resets Monday)
- Unlimited landscape scans
- Compliance pentest reports for 1 app (SOC 2 / PCI-DSS)
- Black-box and authenticated penetration testing
- Up to 25 hosts
- 1 team member
- Email support (48-hour response)
Growth
MOST POPULAR
$499/mo
For growing teams with an active security program.
Start free trialEverything in Startup, plus:
- 2 pen test scans per week (resets Monday)
- White-box penetration testing
- Up to 50 hosts
- Up to 3 team members
- Priority email support (24-hour response)
Scale
$999/mo
For established companies with compliance requirements.
Start free trialEverything in Growth, plus:
- 4 pen test scans per week (resets Monday)
- Compliance pentest reports for 2 apps
- Up to 250 hosts
- Up to 5 team members
- Priority support and a dedicated Slack channel
- Quarterly business reviews
Enterprise
from $2,499/mo
For large or complex environments.
Let's talkEverything in Scale, plus:
- 1 pen test scan per day (resets daily)
- Compliance pentest reports: custom, let's talk
- SSO/SAML authentication
- Dedicated customer success manager
- Custom training and onboarding
- Optional private cloud deployment
- Optional private-label branding
- Unlimited hosts and team members
Questions
What's the difference between a pen test scan and a landscape scan?
A landscape scan maps what you have exposed and notices when it changes. It's unlimited on every plan. A pen test scan is the full test: EdgeBreach plans attacks for your application, attempts real exploitation, and records the evidence. Pen test scans are what your plan's allowance counts.
When do allowances reset?
Weekly allowances reset every Monday. Daily allowances reset at midnight in your organization's timezone. Unused scans don't roll over.
Which compliance frameworks do the reports cover?
Reports are built for frameworks like SOC 2 and PCI-DSS, and support others including ISO 27001 and HIPAA. Final acceptance always rests with your auditor, so we'll give you a framework mapping to take to them.
Can I change plans?
Yes. Upgrades take effect immediately.
Not sure which plan fits?
We'll help you size it to what you actually ship, not oversell you.
Book a demo