Free to start. Priced per operator, not per asset.
Community covers the application layer, free forever under Apache-2.0. Pay when you need the enterprise engines, scheduling, white-label reports, teams or multi-tenancy — priced per operator, never per environment, target or concurrent scan.
Prices shown are introductory proposals for the first paid release and may change before public checkout opens. Community stays free forever.
Compare every feature
| Feature | Community | Pro | Team | Enterprise |
|---|---|---|---|---|
| Coverage | ||||
| Application layer: web, API, WordPress/CMS, mobile, infrastructure, code, SBOM and secrets | Included | Included | Included | Included |
| Enterprise engines: desktop, Active Directory, cloud posture, container images, IaC, network devices, firewall, hardening | Not included | Included | Included | Included |
| Kubernetes CIS benchmark import | Included | Included | Included | Included |
| External attack-surface discovery | Included | Included | Included | Included |
| Unlimited in-scope targets | 1 workspace | Included | Included | Included |
| Validation | ||||
| Safe validation with evidence | Included | Included | Included | Included |
| Out-of-band callback server (self-hosted) | Included | Included | Included | Included |
| Deep Scan operator toolkit (capture, replay and payload fuzzing) | Not included | Included | Included | Included |
| Prioritisation | ||||
| Exploit-pressure score (CVSS, EPSS, KEV, maturity, validation, confidence) | Included | Included | Included | Included |
| Offline scoring, no cloud calls | Included | Included | Included | Included |
| Reporting | ||||
| Technical + executive reports (HTML, PDF, DOCX, Markdown, JSON) | Included | Included | Included | Included |
| White-label / custom branding | Not included | Included | Included | Included |
| Retest diffs (new, persisting, fixed) | Included | Included | Included | Included |
| Scheduled scans | Not included | Included | Included | Included |
| Collaboration | ||||
| Shared workspaces and role-based access | Not included | Not included | Included | Included |
| Remediation projects and client portal | Not included | Not included | Included | Included |
| Jira and ServiceNow tickets | Not included | Included | Included | Included |
| Scale and deployment | ||||
| Self-hosted / air-gapped install | Included | Included | Included | Included |
| Multi-tenant for MSSPs | Not included | Not included | Not included | Included |
| Distributed agents / workers | Not included | Not included | Not included | Roadmap · Q2 2027 |
| Security and admin | ||||
| Append-only audit log and scope guardrails | Included | Included | Included | Included |
| Single sign-on (SSO / SAML) | Not included | Not included | Roadmap · Q1 2027 | Roadmap · Q1 2027 |
| Support | ||||
| Community support (GitHub issues) | Included | Included | Included | Included |
| Email support | Not included | Included | Included | Included |
| SLA support and onboarding | Not included | Not included | Not included | Included |
Definitions
Operator
A named person who runs scans or edits findings. Viewers and report recipients are free.
Target
Anything in scope — a host, an app, an API, a build, a config file. Unlimited on paid plans.
Workspace
A separate project with its own scope, findings and reports.
Tenant
An isolated client space for MSSPs, with its own users and branding.
Pricing FAQ
Yes. It is Apache-2.0: use it for client work, modify it, run it anywhere. Paid plans add features, not permission.
Community covers the application layer — web, API, WordPress/CMS, mobile, infrastructure, code and attack-surface scanning — with safe validation, priority scoring, reports and local AI in one workspace. Paid plans add the enterprise engines (desktop, Active Directory, cloud, containers, IaC, network devices, firewall and hardening), scheduling, white-label reports, the Deep Scan operator toolkit, ticketing, teams, client portals and multi-tenancy.
Offline activation is planned for paid plans; the exact licence-file process will be published with the first paid release.
Corvex-RedOps is self-hosted; findings, evidence and reports stay on your infrastructure. The telemetry policy is published in the Trust Center.
Yes — operators can be added mid-term; the proration terms will be confirmed at checkout when self-serve billing launches.
A local payment gateway for BDT is planned at launch alongside USD card checkout.
Your installation falls back to Community features and your data stays in place — nothing is deleted.