Getting Started
Manage Targets
Manage Scans
Manage Organizations
Organization Settings
Plans
On Prem
ZeroThreat Plans
ZeroThreat Plans Overview
ZeroThreat offers multiple plans designed to support different security testing needs — from individual practitioners and small teams to large enterprises and managed security providers.
Each plan provides a different level of scanning capacity, automation, integrations, reporting, and deployment flexibility. This page explains the available plans and their capabilities so that security teams and decision makers can choose the most appropriate option for their organization.
Plan Categories
ZeroThreat plans are grouped by customer type:
- Free – Long-term free tier with limited capabilities
- Professional – For security teams running regular cloud or on-demand scans
- Enterprise – For organizations and service providers requiring scale, automation, governance, and private deployment
Free Plan
Best for: Individuals and small teams getting started with DAST
The Free Plan provides ongoing access to ZeroThreat with limited scanning and reporting capabilities. It is intended for evaluation, and lightweight testing, and does not provide access to paid or enterprise features.
Included
- 1 parallel scan per host
- 5 scans on signup (limited report format)
- 1 free scan credit added each month (limited report format)
- Partial Scan Report with limited visibility into found vulnerabilties
Not included
- Full comprehensive Scan Report
- Re-testing
- CI/CD integrations
- Issue tracking
- Notification Integration
- Production-safe testing
- Agentic AI Pentesting
- Custom attack templates
- Advanced reporting and branding
Limited Scan Report Format (Free Plan) :
The Free Plan delivers scan reports in a restricted format that demonstrates the scanner's detection capabilities while limiting full access to findings. When a vulnerability is identified, the complete HTTP request and response details are shown only for the first occurrence. Additional instances of the same vulnerability are redacted and obscured. This same restriction extends to other security findings including outdated packages, SSL/certificate vulnerabilities, and cloud misconfigurations, which also appear partially hidden. In essence, this format proves the scanner can identify security issues in your application, but withholds comprehensive details across all findings which are reserved for premium plan subscribers.
Professional Plans
Professional plans are designed for security teams that require regular scanning with predictable billing or flexible, usage-based testing.
Professional Pay-Per-Scan
Best for: Teams that perform security testing occasionally or on demand
This plan uses a credit-based scanning model instead of a recurring subscription.
Security teams purchase scan credits in advance and use those credits to run scans as needed.
How it works
- Purchase scan credits
- Each scan consumes one credit
- Credits can be used anytime within their validity period
Highlights
- Unlimited hosts
- Usage-based parallel scans driven by credits
- Free 1-week re-test window
- Agentic AI Pentesting using external AI providers
Limitations
- No CI/CD integrations
- No issue tracking integrations
- No notification integration
- No production-safe testing
- No UI flow automation
- No custom templates
- No advanced reporting or branding
Pricing
- $25 per scan
- Minimum purchase: $125 (5 credits)
Professional Cloud
Best for: Security teams running continuous cloud-based scanning
This plan provides a subscription-based model with predictable monthly or annual pricing.
Highlights
- Configurable number of hosts
- One parallel scan per host
- Unlimited re-tests
- Notification integration
- Agentic AI Pentesting using customer-configured AI provider credentials
- Custom attack templates using Nuclei and Burp (standard update channel)
- Editable Word reports
Limitations
- No CI/CD integrations
- No issue tracking integrations
- No production-safe testing
- No static IP
- No complex UI automation
Pricing
- $100 per month for the first host
- $75 per month per additional host (up to 10)
- 20% discount on annual upfront payment
Enterprise Plans
Enterprise plans are designed for large organizations and service providers that require high concurrency, automation, governance, reporting customization, and private deployment.
Enterprise Pay-Per-Scan (MSSP)
Best for: Managed Security Service Providers, consulting organizations and firms with many applications
This plan supports high-volume, credit-based scanning with advanced reporting and branding capabilities.
Highlights
- Unlimited hosts
- Usage-based parallel scans driven by credits
- 1-week re-test window
- Notification Integration
- Agentic AI Pentesting using external AI providers
- Fast-update custom templates (Nuclei + Burp)
- Editable Word reports
- White-label reports with custom brand, logo, and URL
- Dedicated static scanner IP available as an add-on
Pricing
- Contact Sales
(Minimum purchase of 200 credits, valid for 12 months)
Enterprise Cloud
Best for: Large security teams running continuous cloud scanning with automation and governance
Highlights
- 10+ hosts
- Three parallel scans per host
- Unlimited re-tests
- Full CI/CD integrations
- Issue tracking integrations
- Notification integrations
- Production-safe testing with built-in guardrails
- Agentic AI Pentesting using customer provided external AI providers
- Complex UI flow automation using Playwright
- Fast-update custom templates (Nuclei + Burp)
- Editable Word reports
Optional
- Dedicated static scanner IP available as an add-on
Pricing
- Contact Sales
Enterprise On-Prem
Best for: Organizations requiring private deployment and maximum control
This plan supports on-premise scanning using ZeroThreat CLI and Docker and is suitable for regulated, isolated, or air-gapped environments.
Highlights
- Unlimited hosts
- Two parallel scans included (expandable)
- Unlimited re-tests
- Full CI/CD integrations
- Issue tracking integrations
- Notification integrations
- Production-safe testing with built-in guardrails
- Agentic AI Pentesting using external AI providers
- Complex UI flow automation using Playwright
- Fast-update custom templates (Nuclei + Burp)
- Editable Word reports
- White-label reports
Pricing
- Contact Sales
Plan Feature Comparison
The table below provides a side-by-side comparison of key features and limits across all ZeroThreat plans.
| Feature | Free | Professional Pay-Per-Scan | Professional Cloud | Enterprise Pay-Per-Scan | Enterprise Cloud | Enterprise On-Prem |
|---|---|---|---|---|---|---|
| Pricing | $0 / month | $25 per scan (credit-based) Minimum 5 credits | $100/month (1st host) $75/host (up to 10) | Contact Sales | Contact Sales | Contact Sales |
| Billing Model | Subscription | Credit-based scanning | Subscription | Credit-based scanning | Subscription | Subscription |
| Hosts | Limited | Unlimited | Configurable | Unlimited | 10+ | Unlimited |
| Parallel Scans | 1 per host | Usage-based (credit-driven) | 1 per host | Usage-based (credit-driven) | 3 per host | 2 included |
| Re-Tests | Not available | Free 1-week re-test | Unlimited | Free 1-week re-test | Unlimited | Unlimited |
| CI/CD Integrations | No | No | No | No | Yes | Yes |
| Issue Tracking Integrations | No | No | No | No | Yes | Yes |
| Notifications (Slack / Teams) | No | No | Yes | Yes | Yes | Yes |
| Static / Dedicated Scanner IP | No | No | No | Add-on available | Add-on available | N/A |
| Production-Safe Testing (Guardrails) | No | No | No | No | Yes | Yes |
| Agentic AI Pentesting | Not available | Yes (external AI provider integration) | Yes (external AI provider integration) | Yes (external AI provider integration) | Yes (external AI provider integration) | Yes (external AI provider integration) |
| Complex UI Flow Automation (Playwright) | No | No | No | No | Yes | Yes |
| Custom Attack Templates (Nuclei & Burp) | No | No | Standard updates | Fast updates | Fast updates | Fast updates |
| Editable Word Reports | No | No | Yes | Yes | Yes | Yes |
| White-Label Reports (Brand, Logo, URL) | No | No | No | Yes | No | Yes |
Choosing the Right Plan
- Choose Free if you need basic, long-term access with limited reporting.
- Choose Professional Pay-Per-Scan for occasional or ad-hoc testing.
- Choose Professional Cloud for regular scanning with predictable billing.
- Choose Enterprise Pay-Per-Scan if you are an MSSP or consulting provider running large volumes of scans.
- Choose Enterprise Cloud for large teams requiring automation, governance, and compliance.
- Choose Enterprise On-Prem if you require private deployment and maximum operational control.
If you are unsure which plan fits your environment, our team can help assess your scanning and deployment requirements.
Contact Sales
If you are evaluating Enterprise plans or require custom deployment, concurrency, integrations, or pricing:
👉 Contact the ZeroThreat Sales team to discuss your requirements and receive a tailored plan recommendation.