Flexible pricing for your attack surface management
Plans start at £89 per month for small teams, up to £499 per month for organisations needing additional automation and enterprise-scale coverage.
All plans are billed monthly with no long-term commitment. Access is currently arranged directly with our team, so register your interest and we’ll be in touch.
How much does attack surface management cost?
Most enterprise attack surface management platforms are priced for large security teams and sold through procurement-heavy sales cycles. Published pricing is rare, and where it exists, entry-level plans typically start at several thousand pounds per month or are bundled into annual contracts.
Attack Surface Center is priced to be accessible without hiding the costs. The Starter plan at £89 per month covers up to 10 assets with weekly port scanning, web application scanning, and automated subdomain discovery included. The Standard plan at £179 per month extends coverage to 30 assets with a risk register, Slack integration, and AI-powered reporting. The Advanced plan at £499 per month covers up to 100 assets with additional automation and cloud integrations for AWS, GitHub, and Cloudflare.
Attack surface management plans
Prices are shown for guidance. Register your interest to discuss access, or contact us if you need something a little more bespoke.
Starter
For small businesses taking their first steps in attack surface management.
- Includes 5 users
- Asset and vulnerability management
- Attack Surface Map and attack chain mapping
- Port scanning, web application scanning, and vulnerability scanning for up to 10 assets **
- 2 root domains for automated discovery
- Automated subdomain, DNS & IP discovery
- Typosquatting domain detection
- Weekly scheduled scans
- Automations run monthly
- Task management
- 1 custom assessment report/month
Standard
For growing businesses that need continuous visibility and reporting.
- Includes 10 users
- Everything in Starter
- Port scanning, web application scanning, and vulnerability scanning for up to 30 assets **
- 5 root domains for automated discovery
- Risk register
- Slack integration
- Email address discovery
- 3 custom assessment reports/month
- AI powered reporting
Advanced
For teams that need third-party integrations, deep automation, and organisation-wide coverage.
- Includes 25 users
- Everything in Standard
- Port scanning, web application scanning, and vulnerability scanning for up to 100 assets **
- 15 root domains for automated discovery
- Automations run daily
- AWS, GitHub & Cloudflare integrations
- 10 custom assessment reports/month
- Expert security advice - direct Slack access to our security team.
* Excludes any applicable taxes for your country or jurisdiction. Prices are in GBP (£) and may vary based on your location.
** Each plan includes a base monthly allowance of scannable assets (e.g. domains, IPs, hosts). Assets can be reused throughout the month and scanned as frequently as needed. Additional assets can be purchased in-app. See our FAQ section for more details on how asset allowances work.
Compare attack surface management plans
Compare plans side by side to find the right fit. All paid plans include scanning, automated discovery, and task management. Differences are in scale, automation frequency, and integrations.
| Feature | Starter | Standard | Advanced |
|---|---|---|---|
| Included User Accounts | 5 | 10 | 25 |
| Additional User Accounts | £5 / user | £5 / user | £5 / user |
| Multi-Factor Authentication (MFA) | |||
| Vulnerability & asset management | |||
| Create & Manage Assets | |||
| Create & Manage Vulnerabilities | |||
| Attack Surface Mapping | |||
| Upload Scan Results from Third-Party Tools | |||
| Attack Chain Mapping | |||
| Risk Register | — | ||
| Reporting | |||
| Create & Publish Custom Reports * | 1 / month | 3 / month | 10 / month |
| Additional Custom Reports | £5 / report | £5 / report | £5 / report |
| AI Powered Automated Reporting | — | ||
| Scanning & automation | |||
| Scannable Assets ** | 10 / month | 30 / month | 100 / month |
| Additional Scannable Assets | £5 / asset | £5 / asset | £5 / asset |
| Scheduled Port Scanning ** | |||
| Scheduled Network Vulnerability Scanning ** | |||
| Scheduled Web Application Vulnerability Scanning ** | |||
| Automated discovery | |||
| Typosquatting Domain Detection | 2 domains | 5 domains | 15 domains |
| Subdomain Enumeration | 2 domains | 5 domains | 15 domains |
| DNS Intelligence | 2 domains | 5 domains | 15 domains |
| Email Security Configuration Discovery | 2 domains | 5 domains | 15 domains |
| Automated Email Address Discovery | — | ||
| Automation Frequency | Weekly | Weekly | Daily |
| Integrations | |||
| Slack Integration | — | ||
| AWS Connector Integration | — | — | |
| GitHub Integration | — | — | |
| Cloudflare Integration | — | — | |
| Other | |||
| Task Management | |||
| Expert Security Advice | — | — | |
* These limits only affect the number of reports you can create and publish. You can still view and access an unlimited number of reports.
** These allowances are designed to cover typical network sizes at each plan level - while keeping pricing transparent and predictable. See our FAQ section for more details.
Pricing FAQs
Each plan includes a monthly allowance of scannable assets (e.g. domains, IPs, hosts).
Assets can be reused throughout the month and scanned as frequently as needed. This makes it easy to monitor the same targets over time without incurring additional costs.
Yes, if you exceed your monthly asset allowance, you can purchase additional assets at any time in-app to continue scanning without interruption. This allows you to scale your scanning coverage as needed while maintaining the flexibility to manage your costs.
If you exceed your monthly asset allowance, you can purchase additional assets in-app to continue scanning without interruption.
If you choose not to purchase additional assets, you will still be able to scan up to your included allowance, but any scans targeting assets beyond that limit will not run until you either remove some assets or purchase more.
No, unused assets and reports do not roll over to the next month. Each month, your asset and report allowances reset to the limits of your current plan.
This means that any unused assets or reports from the previous month will not carry over, so it’s a good idea to make use of your allowances each month to get the most value from your subscription.
Yes, the Attack Surface Center allows you to invite your team to collaborate and share your findings.
Each plan has a different number of user accounts, and if you need more, you can easily upgrade your plan or add additional user accounts to your subscription.
The paid plans are billed monthly, with a minimum term of 1 month. You can cancel your subscription at any time before the next billing cycle to avoid being charged for the following month. There are no long-term contracts or commitments required.
Yes, you can upgrade or downgrade your plan at any time. If you upgrade, the new plan will take effect immediately and you will be charged the difference in price on your next bill. If you downgrade, the new plan will take effect at the end of your current billing cycle.
Access to the platform is currently arranged directly with our team. Register your interest and we’ll be in touch to discuss your requirements, including whether a trial is right for you.
Yes. The Starter plan at £89 per month is designed for small businesses and teams managing up to 10 assets, with port scanning, web application scanning, and automated subdomain discovery included.
Enterprise attack surface management platforms from large security vendors typically start at several thousand pounds per month and are aimed at organisations with large security teams and complex procurement requirements.
Attack Surface Center is priced for security-conscious businesses that need continuous visibility without enterprise-scale costs.
Plans start at £89 per month with no long-term commitment.
