One plan per surface. Sold only when in place.
Every plan on the home page is repeated below with what the home page does not show: its price, and every function it covers, defined one by one. A plan sells only what is marked in place; anything still in observation is listed and never billed as delivered.
Sign in to subscribe — a session is required to open Stripe Checkout. Create an account if you do not have one.
Code & Software Supply Chain
Static analysis and taint tracking, dependencies, secrets, SBOM, provenance and install-hook behaviour on your repositories.
21 functions in place
per organization, up to 10 repositories; $5 per repository beyond that
- Multi-language RulesRuns Semgrep with rule packs kept in sync with the official Semgrep registry, covering many programming languages.
- OWASP Application Top 10Flags OWASP Top 10 application weaknesses in source code, including injection, cross-site scripting, cross-site request forgery and unsafe deserialization.
- OWASP API Top 10Checks source code for OWASP API Top 10 weaknesses statically; it inspects code as written and performs no data-flow analysis.
- OWASP LLM Top 10Covers the OWASP Top 10 for large language model applications, limited to the categories that can be detected by inspecting code.
- Framework SurfaceMaps the surface a Next.js project exposes, covering its routes, server actions and middleware.
- Noise ManagementManages scan noise through false-positive handling, suppressions and rules written in-house, so results stay reviewable.
- Language CoverageRenders the data-flow path, and not only the verdict, for the seven supported languages beyond JavaScript and TypeScript.
- Inter-procedural Taint AnalysisTraces tainted data from sources to sinks across files using a real TypeScript syntax tree and recognises sanitizers; JavaScript and TypeScript only, neither path- nor alias-sensitive.
- Binary AnalysisReads ELF headers, symbols and strings to check hardening flags such as RELRO, NX, PIE, stack canaries and FORTIFY, plus risky imports and embedded credentials, never executing the binary.
- Dependency VulnerabilitiesMatches declared dependencies against known vulnerabilities by version range and states the remedy: an exact version to pin, or that no fix is published.
- Asset InventoryBuilds a dependency inventory from npm, pnpm, yarn, Cargo, pip and Go lock files, and keeps it across scans rather than discarding it.
- CI/CD SecurityExamines GitHub Actions workflows for risks such as mutable tag references and excessive job permissions.
- TyposquattingCompares package names against a typosquatting list and generates lookalike domain variants with dnstwist.
- License ComplianceIdentifies the licences of the project's dependencies so licence obligations and incompatibilities can be reviewed.
- Container ImagesScans container images for known vulnerabilities in their installed packages using Trivy.
- Malicious PackagesResolves a package's install hooks to the files they actually execute, follows the import graph and classifies the behaviour, raising severity only on combined signals.
- Secrets & KeysDetects secrets and tracks each one's lifecycle across five states: present in the current tree, rotated, removed but still in history, outside version control, or unknown.
- SBOM GenerationProduces a CycloneDX 1.6 software bill of materials validated against the official schema, with per-ecosystem package URLs; SPDX output is not available yet.
- Provenance & SigningVerifies signing certificates hop by hop up to a Fulcio authority listed in Sigstore's trust root, judging every validity window at the signing instant attested by Rekor.
- Reproducible BuildsRebuilds a package from the attested source repository and revision inside a Docker sandbox, then compares it against the published registry tarball by hash and file by file.
- Vendor RiskLists third-party vendors only where a line of the scanned code names one, and checks each vendor's external TLS, headers, DNS, DMARC, SPF, DKIM and certificate transparency posture.
Application
Scanning of a running application you have proven you control: authenticated crawling, authorization tests, fuzzing, browser and API security.
9 functions in place
per organization, up to 5 applications; $15 per application beyond that
- Web Vulnerability ScanningProbes running web applications with Nuclei and its community template set for known vulnerabilities and exposures.
- Liveness VerificationChecks that each target endpoint actually responds before results are drawn from it, so a scan is not reported against a dead host.
- FuzzingFuzzes HTTP, GraphQL, WebSocket and gRPC services; properties requiring introspection are left unanswered, and without a schema definition gRPC message content is not fuzzed.
- Application CrawlingCrawls an authenticated application while holding session state, groups URLs by shape so identifier-bearing routes cannot exhaust the budget, and re-proves the session at a fixed cadence.
- Authenticated DASTDerives access-control test plans from observed journeys; a derived case needs a marker present for the owner and absent for the other identity, otherwise it stays disarmed.
- Authorization TestingTests vertical privilege elevation and multi-tenant isolation using roles and tenants that are declared rather than inferred; an absence measured with a guessed identifier stays inconclusive.
- Browser SecurityRoutes DOM cross-site scripting through the same taint engine as server-side flaws, giving a numbered path, and checks prototype pollution, CDN dependencies and subresource integrity.
- IAST / RASPInstruments the running application to observe where attacker-controlled input lands across 24 sinks, grading findings strong or weak; blocking mode is disarmed by default and weak findings never block.
- Mobile SecurityReads APK and IPA packages, including Android binary XML and Apple binary property lists, and hands native libraries to the binary scanner; no decompilation and no DEX analysis.
Surface & Network
Ports, TLS, headers, DNS posture, exposure and certificates on your targets, and the intrusion-detection sensor you supply.
13 functions in place · 4 in observation
per organization, up to 20 targets (domains, addresses); IDS sensor supplied by the customer
- Service DiscoveryUses nmap to discover which hosts are reachable and which ports and services they expose.
- TLS ConfigurationInspects TLS endpoints for cipher suites, protocol versions, chain and expiry, reading the certificate even when the handshake would otherwise be rejected.
- HTTP HeadersReviews HTTP response headers, including content security policy, HSTS, cookie attributes and referrer policy.
- DNS PostureApplies 67 DNS rules covering delegation and dangling records, and judges DNSSEC against an explicit validating resolver rather than the local stub resolver.
- External ExposureLooks for externally exposed assets belonging to the organization and for its accounts appearing in known breaches.
- Attack Surface ManagementReconciles the known external surface on each scan and raises a webhook alert, with silence judged by staleness since host sweeps run at most once a week.
- Certificates & PKITracks certificates over time and compares each observation against the previous one, drawing on certificate transparency logs including certspotter; a source that failed removes nothing from the inventory.
- Segmentation ValidationProves segmentation by sending packets between Docker containers; cloud rule analysis and manifest declarations are reported as weaker, clearly separated tiers of evidence.
- Network Intrusion Detection (IDS)Reads Suricata alerts from the Emerging Threats Open ruleset with a per-file cursor that survives rotation; it detects and alerts on network traffic but blocks nothing inline.
- NDRPersists observed appearances from one sampling tick to the next, records when the sampler was awake, and measures rhythm with median absolute deviation rather than standard deviation.
- Flow AnalysisSamples live connections from packet capture and connection tracking and flags sustained flows; eBPF and bpftrace are out of reach, leaving three of four sources in use.
- DNS FilteringReads resolver query logs, preferring the lookup line emitted for every query including cache hits, falling back to the other form, and never adding the two together.
- Zero Trust & AccessJudges zero-trust posture from the code during a scan and persists its findings; a reference to a product is not counted as an access decision.
- Wireless Securityin observationReads the wireless radios the system can see and scans on request, refusing to transmit frames or change radio state itself. An empty cache returns unknown rather than a verdict.
- WAF / Inline Protectionin observationFilters inbound requests inline at the proxy. Nothing on this surface reaches it as a hostile request today — the findings here are configuration weaknesses such as a weak content security policy, missing headers or open ports — so it stays in observation.
- Anti-DDoS & Rate Limitingin observationJudges request bursts volumetrically at the proxy in observation mode: every request is still served and none refused. Arming it is not currently possible, and the checks need ten active minutes of traffic.
- Bot Defensein observationJudges credential stuffing, scraping and signup fraud at the proxy in observation mode. Ordinary requests draw silence from the inline engines; hostile-shaped ones are judged and still allowed through.
Cloud & Containers
Read-only posture of a cloud account, container images, Kubernetes and infrastructure-as-code, with drift and effective permissions.
9 functions in place
per cloud account; $40 per additional account
- IaC ScanningChecks infrastructure-as-code for insecure settings across Terraform, CloudFormation, Kubernetes manifests and Docker Compose files.
- Configuration AuditReads the real configuration files present in the scanned project, not only templates, and reports insecure settings.
- Drift DetectionReports what has changed in configuration since the previous observation, so unexplained changes surface.
- Container HardeningChecks a live Docker daemon and the Compose files under the scanned path; it covers neither Kubernetes nor ECS, and that limit travels with every result.
- CSPMReads S3, EC2, IAM and CloudTrail settings read-only, and when no cloud credentials are available reports unknown with the reason instead of folding it into a clean result.
- CIEMEvaluates eighteen privilege-escalation paths in AWS, each requiring a conjunction of conditions, and declares the check skipped when no AWS identity is configured rather than reporting a clean account.
- Kubernetes SecurityQueries a live Kubernetes API server over REST with mutual TLS or a token, without kubectl, to read effective RBAC, registered admission webhooks and running pods.
- Container RuntimeStreams Docker runtime events into the telemetry pipeline, so actions such as a shell opened inside a container are observed live.
- Hardening BenchmarksReports a ratio of how many hardening controls this pass could query alongside the failures; it is not a CIS benchmark evaluation, and unreadable controls name the privilege they need.
Host & Ransomware
File integrity, ransomware detection and decoys on each host. Containment of a process is a separate add-on, behind its own consent.
8 functions in place
$39 per month minimum; integrity agent and decoys included; automatic containment is a separate, consented add-on
- File IntegrityFingerprints the files it monitors and raises an alert when one of them is modified.
- Host MonitoringEvaluates the detection rule pack against the host telemetry feed every hour and records the alerts it produces.
- Ransomware DetectionFlags ransomware by calibrated combinations of file entropy, mass renaming and decoy files; backup-deletion detection is Linux-only, as its Windows equivalent is invisible to a file watcher.
- EDRExamines the process tree, injection signals and persistence when an incident opens; memory maps the host refuses to expose are reported as not examined, never as clean.
- Malware AnalysisScans with ClamAV using the EICAR test file as a positive control, and returns unknown with the database date when signatures are stale rather than asserting a clean result.
- Backup IntegrityOpens declared archives and rates restorability on a five-rung ladder, naming ceilings: an uncompressed tar carries no checksum, and bundle verification can pass on corrupted data.
- Patch ManagementCross-references the installed host packages against synchronised CVE and KEV feeds each night, and explains a zero result rather than presenting it as clean.
- Application ControlObserves application-control posture such as AppArmor profiles and enforces nothing, allowing for the fact that an unprivileged caller cannot read the full profile set.
Identity & Data
Authority matrix, exposed credentials, sessions, OAuth, personal-data discovery and encryption posture.
11 functions in place · 3 in observation
per organization; exposed-credential monitoring included
- Authority MatrixMaps who holds authority over on-chain contracts, HTTP routes and cloud IAM permissions in one matrix; directory services are not covered.
- Authentication PostureJudges single sign-on, password policy, dormant accounts and application authentication, querying IAM Identity Center separately; service roles are explicitly out of scope for dormancy.
- Session SecurityJudges session fixation, absolute and inactivity expiry, revocation and token theft by reading source code, returning unknown where reading alone cannot decide.
- OAuth & FederationAnalyses OAuth connector source code without network calls, against four rules including excess scope compared with actual use and input-derived redirects, which are flagged but never proven open.
- Personal Data DiscoveryDetects personal data in text and files, which is a distinct question from secret detection.
- Encryption at Rest & Key ManagementChecks encryption at rest by reading the local database header and looking for a LUKS or dm-crypt layer across block devices and mounts, and whether any key manager is present.
- Data ClassificationClassifies every table and column in the data store by the class it carries, such as credentials, identifiers, contacts and financial data, and which routes reach them.
- Leak PreventionInventories the outbound destinations the code declares and compares them with observed egress samples, each flow attributed to the process that produced it.
- Database PostureChecks database file permissions including the write-ahead log, which holds recent rows in plaintext, confirms ignore status with version control itself, and reports queries escaping ORM parameterization.
- Privacy ComplianceResolves ten GDPR obligations at run time against the deployment's real artifacts rather than a static catalogue, and reports how many are actually substantiated.
- Backup GovernanceChecks where backups live and who can reach them, reporting when every copy resolves to a single device under one account with no off-host copy, and reading immutability attributes.
- Compromised Credentialsin observationChecks accounts and domains against an external breach database, treating a rejected key as unknown rather than as no leak. No authenticated call has been made yet, since no key is configured.
- Privileged Accessin observationReuses the three-state permissions verdict and adds tenure, distinguishing permanent privilege from requested privilege. An expiring role assumption is not treated as just-in-time elevation, because the right to invoke it never expires.
- Behavioral Analysisin observationParses console sign-in outcomes from cloud provider event records and escalates a failed sign-in, stating its fallback when no readable response exists. The verdict stays thin until more sign-in history accumulates.
Compliance & Governance
Control map for SOC 2 and ISO 27001, evidence over a declared period, risk register and remediation tracking.
8 functions in place
per organization; SOC 2 / ISO 27001 catalogue, risk register, audit evidence
- Policy as CodeExpresses policies as machine-checked rules covering actuator arming, service-level targets by severity and availability of required evidence, then resolves each rule against the live environment.
- Audit EvidenceExports the evidence chain on its own and recomputes each SHA-256 fingerprint from that export alone, propagating the calculated hash rather than the stored one.
- Compliance FrameworksMaps controls to frameworks such as SOC 2 Type II and separates the few controls whose evidence covers a period from the majority that remain point-in-time.
- Risk RegisterCollects risks from the mechanisms that carry them, grades each by the rigor of the decision behind it, and flags those with no review date.
- Remediation TrackingTracks each finding through its lifecycle with an owner and a due date, and marks a fix verified only after a fresh run re-reads the code.
- Cyber InsuranceAnswers an insurance underwriting questionnaire from the modules that measure each point, marking answers unsubstantiated rather than substituting a nearby control that does not match.
- Coordinated DisclosureChecks whether the target publishes a security.txt contact under RFC 9116, treating an expired file as a violation and an unreachable host as unknown.
- Business ContinuityRecords recovery point and recovery time objectives with an owner and a review date, then reconciles them against real archives and reports an untested objective as never exercised.
Operations & Response
Log collection and correlation, detection rules, threat hunting, incidents, forensics, playbooks and vulnerability feeds.
16 functions in place · 1 in observation
per organization, 20 GiB of logs per month included; $3 per GiB beyond that; AI incident forensics available as an add-on
- Automated ResponseSeparates detection triggers from response actions and, on a real detection, issues a notification only, reporting the attempt honestly rather than claiming an effect.
- Log Collection & CorrelationCorrelates collected events across producers during each detection pass and reports how sparse the shared fields are instead of returning a silent zero.
- Detection RulesReports, for every detection rule, whether a producer capable of feeding it exists and whether it has ever fired, naming the missing producer for each blind rule.
- Threat HuntingRuns hunting hypotheses that return one of three outcomes: found, not found within a stated time horizon, or impossible to ask with the available data.
- Incident ManagementMoves incidents through seven states, including stopped without explanation, and measures detection delay from the first event rather than from when the ticket opened.
- ForensicsCaptures volatile host state such as processes, sockets, ARP entries, kernel modules, mounts and sessions in RFC 3227 order of volatility, recording the privilege ceiling reached.
- Orchestration PlaybooksRuns playbooks limited to safe actions such as evidence capture, incident notes, tickets and approval requests, while a containment action stays declared only and is always refused.
- DecoysPlants URL canary tokens whose route answers byte-for-byte like a dead link, while AWS and DNS decoy forms are refused for lack of a trail and a nameserver.
- Vulnerability FeedsReads vulnerability advisories from NVD and OSV.dev, including NVD product trees, so advisories can be matched to named products where the data provides them.
- Web3 Incident CorpusDraws on public Web3 incident records from DefiLlama, SlowMist, DefiHackLabs and Rekt for context on past on-chain attacks.
- Public Audits & ContestsSearches published audit and contest findings from Code4rena, Sherlock, Cantina, Solodit and Anza for issues already reported in comparable code.
- Findings Prior ArtLooks up prior art for a finding across public advisories well beyond Web3, returning pointers to comparable reports rather than corroboration of the finding's severity.
- Bug Bounty Program WatchMonitors public bug bounty programs and their in-scope assets through the Immunefi API, announcing only later changes and returning unknown when a fetch fails.
- New CVE AlertingWatches new CVE publications on an ongoing basis and raises an alert when a newly published vulnerability matches the monitored scope.
- Real-world ExploitabilitySequences CISA KEV, EPSS scores and a public exploit index to judge real-world exploitability, keeping unknown distinct from zero.
- Indicators of CompromiseHolds indicator feeds of URLs, hashes, address ranges and domains from keyless public sources, and reports which indicator types are actually present before matching.
- Underground Monitoringin observationMonitors only public, lawfully accessible sources, accessing no criminal marketplace, authenticating nowhere and bypassing no access control. It stays partial, since closed-community coverage requires an analyst's human access this function does not provide.
Offensive Validation
Exploitation run rather than asserted, mutation testing, symbolic execution, exploit chains and validation of your own detections.
5 functions in place · 4 in observation
per organization, up to 3 targets; or $299 per one-off campaign
- Mutation TestingPlants deliberate bugs in the code and measures whether the existing test suite actually catches them.
- Symbolic ExecutionExplores contract execution paths symbolically with Mythril to surface conditions that ordinary testing is unlikely to reach.
- Vulnerability ReachabilityTraces tainted input through to its sink so a reported issue comes with the concrete path that reaches it, including regular-expression denial-of-service cases.
- Exploit ChainsCombines separate medium-severity findings into a single chain when their preconditions connect, and declines to report a chain when they do not.
- Pentest ReportProduces an engagement-style report in which scope is a first-class section, naming what was not tested and listing every unknown capability as a limitation.
- Proof by Exploitationin observationBacks a finding with an exploit actually executed rather than asserted; three are verified by hand today, one of them against a third-party contract from the public SmartBugs corpus.
- Attack Simulationin observationReplays scenarios tied to named MITRE ATT&CK techniques through the same evaluation the detection pass uses, with a planted positive and a hardened twin. Two of eleven techniques have no matching rule, and the run stays in memory rather than the live event store.
- Detection Validationin observationValidates a customer's own detection rules, events and producer inventory using that customer's taxonomy exclusively, so a foreign rule name is never mistaken for a built-in one.
- Adversarial Load Testingin observationMeasures sustained saturation, concurrency and volumetric behaviour against a disposable server the test itself starts and stops, reporting latency, rejection and per-payload cost.
Smart Contract Verification
Eight on-chain ecosystems, a multi-model panel with a judge, and on-chain proof on a fork of the target chain. Automated verification — not an audit, and it carries no assurance or guarantee.
10 functions in place
tiered and cumulative within a calendar month: 1 to 20 contracts $50, 21 to 40: $40, 41 to 60: $30, beyond that $20; the count resets each month; one contract = up to 20 KB of source; scanning the same contract again is a new billable contract
1 × $50
- Solidity Static AnalysisAnalyses Solidity source statically with Slither, Aderyn, Mythril and in-house rules, without executing the contract.
- Multi-model PanelReviews the same code with several language models assigned distinct roles, then consolidates their output through a judging step.
- Invariants & PropertiesFuzzes the contract against declared invariants and properties, guiding the search deeper to find inputs that break a stated rule.
- Economic SecurityModels market behaviour and participant incentives to surface conditions where a protocol's economics, rather than its code, can be turned against it.
- Fork DiffCompares a forked contract against the audited original it was derived from and reports exactly what was changed.
- Deployed DriftChecks whether the bytecode actually deployed in production still matches the source that was reviewed.
- On-chain MonitoringWatches deployed contracts for administrative events, bytecode changes and shifts in the values returned by read-only functions.
- Multi-ecosystemCovers EVM chains plus seven non-EVM ecosystems — Solana, Tron, Starknet, Aptos and Sui, Cosmos-based chains and Near — each with pattern-matching analyzers and, where the compiled program is available, an adversarial on-chain campaign on a local fork or sandbox.
- Source VerificationRetrieves verified source from Etherscan V2, Routescan, Blockscout, Sourcify and Kaiascan across more than thirty-five EVM chains — plus Tronscan and Voyager for Tron and Starknet — following a proxy through to its implementation contract.
- Cross-chain SecurityReads bridge and messaging source for seven failure classes, including who can mint or release, replay protection and unverified payloads; it reads code rather than executing it.
Web3 Monitoring
Continuous watch of a deployed protocol: drift against the reviewed source, governance and upgradability, scam shapes and wallet approvals.
5 functions in place
per monitored protocol; continuous deployed-drift and on-chain monitoring
- Governance & UpgradabilityMeasures a timelock's delay and who can change it, reporting an admin-guarded delay change as a bypass and returning unknown rather than zero when the value cannot be read.
- Scam DetectionFlags honeypot, hidden blocklist, unbounded minting and rug-pull shapes as capabilities present in the code, never as a confirmed intent to use them.
- Wallet SecurityFinds token approvals from event logs, then confirms each one's current value with a live contract call so a revoked approval is not reported as active.
- MEV & OrderingAssesses sandwich exposure, oracle manipulation surface and reorg sensitivity, showing manipulation by overwriting a real storage slot and reporting slot-not-found when none is identified.
- On-chain ComplianceScreens addresses against the fetched OFAC sanctions list, judging the list's freshness by its own publication date and matching only on exact equality after normalization.
AI & Agents
OWASP LLM Top 10 read from the code, tool and MCP security, model provenance, agent guardrails and retrieval pipelines.
5 functions in place · 2 in observation
per organization; static OWASP LLM Top 10, transcript leakage, model provenance, agent guardrails and RAG pipeline security
- Static OWASP LLM Top 10Checks the OWASP Top 10 for LLM applications, limited to the categories that can be decided by reading the code.
- Transcript LeakageScans agent transcripts for exposed credentials using key prefixes and secret-shaped assignments; it detects leaked values after the fact and does not prevent leakage.
- Model ProvenanceJudges model artifact format risk, separating checkpoints that execute code on load from safetensors files, and states plainly that it cannot detect a poisoned model.
- Autonomous Agent GuardrailsEvaluates an agent deployment for bounded actions, spending ceilings, attributable audit trails and human approval, returning unknown where no step actually acts on the world.
- RAG Pipeline SecurityReads a retrieval pipeline's code for ingestion and retrieval risks, never the contents of an index, and returns unknown where no pipeline is present.
- Runtime Prompt Injectionin observationRuns a hostile prompt corpus only against an endpoint the operator explicitly declares and consents to, and counts one stated test condition as the evidence that a prompt was obeyed.
- Tool & MCP Securityin observationInventories configured MCP servers, classifying each as mutating, read-only or of unknown capability, and flags any that carry a credential in plain text.
Email & CEO Fraud
Executive-fraud and impersonation detection on a mailbox you connect read-only, with the pretext surface an attacker can see.
1 function in place · 4 in observation
per organization; mailbox ingestion, BEC detection; the rest of the human factor follows once wired up
- Email SecurityDetects CEO fraud and impersonation and inspects attachments through read-only Gmail and Microsoft Graph connections, raising an event for every attachment it could not examine.
- Phishing Simulationin observationPrepares phishing simulation material but cannot send it, since the function contains no mail transport or network client at all, by construction rather than by a setting.
- Awareness Trainingin observationAssigns targeted follow-up training after a measured failure and tracks assignment and completion; a completion rate is not a measure of competence.
- Pretext Surfacein observationReports which names, roles and address formats are publicly discoverable and whether DNS, SPF and DMARC posture eases impersonation, under a recorded authorization and out-of-scope register.
- Insider Riskin observationAssesses account access only: it scores no employee, infers no intent and monitors no behaviour, returning satisfied, violated, unknown or not applicable per check.
Sentinelleai Complete
every monthly plan at its base cap; contract audits billed per use
Smart contract verifications are billed per contract even for members of this bundle — the per-contract plan is not among the recurring plans the bundle grants. The three protections are not included either: each acts on your own production, so each stays an explicit opt-in.
Deep contract verification
Beyond the multi-AI panel: mutation testing measures whether your test suite actually catches a broken guard, and Echidna fuzzes your invariant properties to try to falsify them. Because both run against your own repository, this is offered only when your repo qualifies— a green Foundry test suite for mutation, an invariant harness for Echidna. The fee covers the CPU time of a full pass (tens of minutes).
Web reasoning panel
The same multi-model approach as the smart contract panel, applied to a website. After the web scanners finish, several AI models reason over their findings together: they correlate them into exploit chains, surface business-logic and authorization flaws that pattern-based tools cannot see, and a judge consolidates the result. It runs on a site whose ownership you have proven, reads only, and flags anything that would need an active test for your consented verification.
One purchase is one completed pass on one site, and it includes the web scan it reasons over: no Application plan is needed. Buy it, run a web scan of that site, and the reasoning pass is added to the report. If the pass does not complete, the run is returned to you. A new account's free run can be spent on one reasoning pass, so your first one costs nothing.
Sign in to buy.
Offensive Validation — one-off campaign
The same offensive validation the monthly plan runs — proof by exploitation, mutation testing, attack simulation and detection validation — bought once for a single engagement rather than by the month. One campaign runs for 30 days from its first test, against up to 3 targets you have proven, and every active module still runs behind the same consent. From the second campaign onward the monthly plan costs less.
Sign in to buy.
Sold on their own, each behind a signed consent.
These are not scans. Each runs continuously and acts on your own production, so none of them is included in the Sentinelleai Complete bundle and each requires reading and signing its instructions before checkout will proceed. None of them ever reverses itself — reopening is always your decision.
Auto-pause
A pause-only on-chain circuit breaker: Sentinelleai holds a pauser role and watches your deployed contracts every ~2 minutes on two independent RPCs for unambiguous compromise signals — the owner changed, a non-upgradeable contract's bytecode changed, a proxy's implementation slot changed. Pause only, never unpause — the service's transaction ABI contains exactly one function, and it refuses to start if that list is widened; reopening always stays with your owner or multisig. In production on the operator's own protocol (Magneta Finance, 20 EVM chains) since August 2026, zero false triggers. Pairs naturally with Web3 Monitoring but is sold standalone and is not included in the Sentinelleai Complete bundle. See the documentation.
Site lockdown
A lock-only circuit breaker for a web server you run: an agent you install writes a flag file your reverse proxy (Caddy or nginx, from our templates) reads — flag present means every visitor but one allow-listed operator IP gets a static 503 instead of your site. Engaged by your own command, or optionally by the agent's own CRITICAL ransomware alert on that host if you enable the local trigger. Lock only, never auto-release — release is always your Release command or an rm of the flag file over SSH; there is no auto-expiry and Sentinelleai never releases a lock on its own. Sold per host per month, not included in the Sentinelleai Complete bundle, and requires signing a consent before the first subscription — see the documentation.
Host containment
On the same host you enrol for ransomware detection, the agent can kill the process it attributes to its own CRITICAL alert and isolate the host's network — reversibly and, by default, time-limited. Arming requires two things at once: your command here, choosing kill, isolate, or both, and the host operator's own literal in the agent's environment — either alone does nothing. The Host & Ransomware plan keeps the integrity agent and decoy files, but no longer includes automatic containment on its own; containment is sold and consented separately, and it is not included in the Sentinelleai Complete bundle either. See the documentation.
Group plans, priced per seat.
One subscription for a whole team: every member signs in with their own account and inherits the plan, under central administration and a single bill. Manage members and subscribe from your organisation.
Team
Minimum 3 seats
For a security team that needs several people scanning under one account and one bill.
- ·Pooled access to the core scanning suite (code, app, surface, cloud, host, identity, AI, human-factor, web3 drift)
- ·Central member management with owner / admin / member roles
- ·One consolidated bill for the whole team
- ·Optional shared workspace — the team sees the team's results
Business
Minimum 5 seats
For a company that wants the full platform, compliance evidence and awareness programme across its team.
- ·Everything in Team, pooling the ENTIRE recurring suite per seat
- ·Governance & compliance evidence (SOC 2 / ISO 27001 catalogue, risk register)
- ·Log retention & SecOps analytics (SIEM, 20 GiB/month included)
- ·Offensive validation surface and org-wide phishing simulation + awareness training seats
- ·Priority support
Enterprise
From 25 seats
For a larger organisation needing SSO, provisioning and a negotiated contract.
- ·Everything in Business
- ·Single sign-on (SAML / OIDC) and SCIM provisioning
- ·Dedicated onboarding, a named contact and a custom SLA
- ·Volume seat pricing and annual invoicing
Every function, every plan, one price.
The same functions as above, flattened into one searchable table — type a function name to see which plan covers it and what that plan costs. Definitions of each one are in the capability catalogue.
| Function | Forfait | Status | Price |
|---|---|---|---|
| Autonomous Agent Guardrails | AI & Agents | In place | $49 |
| Model Provenance | AI & Agents | In place | $49 |
| RAG Pipeline Security | AI & Agents | In place | $49 |
| Runtime Prompt Injection | AI & Agents | In observation | $49 |
| Static OWASP LLM Top 10 | AI & Agents | In place | $49 |
| Tool & MCP Security | AI & Agents | In observation | $49 |
| Transcript Leakage | AI & Agents | In place | $49 |
| Application Crawling | Application | In place | $99 |
| Authenticated DAST | Application | In place | $99 |
| Authorization Testing | Application | In place | $99 |
| Browser Security | Application | In place | $99 |
| Fuzzing | Application | In place | $99 |
| IAST / RASP | Application | In place | $99 |
| Liveness Verification | Application | In place | $99 |
| Mobile Security | Application | In place | $99 |
| Web Vulnerability Scanning | Application | In place | $99 |
| CIEM | Cloud & Containers | In place | $89 |
| Configuration Audit | Cloud & Containers | In place | $89 |
| Container Hardening | Cloud & Containers | In place | $89 |
| Container Runtime | Cloud & Containers | In place | $89 |
| CSPM | Cloud & Containers | In place | $89 |
| Drift Detection | Cloud & Containers | In place | $89 |
| Hardening Benchmarks | Cloud & Containers | In place | $89 |
| IaC Scanning | Cloud & Containers | In place | $89 |
| Kubernetes Security | Cloud & Containers | In place | $89 |
| Asset Inventory | Code & Software Supply Chain | In place | $79 |
| Binary Analysis | Code & Software Supply Chain | In place | $79 |
| CI/CD Security | Code & Software Supply Chain | In place | $79 |
| Container Images | Code & Software Supply Chain | In place | $79 |
| Dependency Vulnerabilities | Code & Software Supply Chain | In place | $79 |
| Framework Surface | Code & Software Supply Chain | In place | $79 |
| Inter-procedural Taint Analysis | Code & Software Supply Chain | In place | $79 |
| Language Coverage | Code & Software Supply Chain | In place | $79 |
| License Compliance | Code & Software Supply Chain | In place | $79 |
| Malicious Packages | Code & Software Supply Chain | In place | $79 |
| Multi-language Rules | Code & Software Supply Chain | In place | $79 |
| Noise Management | Code & Software Supply Chain | In place | $79 |
| OWASP API Top 10 | Code & Software Supply Chain | In place | $79 |
| OWASP Application Top 10 | Code & Software Supply Chain | In place | $79 |
| OWASP LLM Top 10 | Code & Software Supply Chain | In place | $79 |
| Provenance & Signing | Code & Software Supply Chain | In place | $79 |
| Reproducible Builds | Code & Software Supply Chain | In place | $79 |
| SBOM Generation | Code & Software Supply Chain | In place | $79 |
| Secrets & Keys | Code & Software Supply Chain | In place | $79 |
| Typosquatting | Code & Software Supply Chain | In place | $79 |
| Vendor Risk | Code & Software Supply Chain | In place | $79 |
| Audit Evidence | Compliance & Governance | In place | $149 |
| Business Continuity | Compliance & Governance | In place | $149 |
| Compliance Frameworks | Compliance & Governance | In place | $149 |
| Coordinated Disclosure | Compliance & Governance | In place | $149 |
| Cyber Insurance | Compliance & Governance | In place | $149 |
| Policy as Code | Compliance & Governance | In place | $149 |
| Remediation Tracking | Compliance & Governance | In place | $149 |
| Risk Register | Compliance & Governance | In place | $149 |
| Awareness Training | Email & CEO Fraud | In observation | $29 |
| Email Security | Email & CEO Fraud | In place | $29 |
| Insider Risk | Email & CEO Fraud | In observation | $29 |
| Phishing Simulation | Email & CEO Fraud | In observation | $29 |
| Pretext Surface | Email & CEO Fraud | In observation | $29 |
| Application Control | Host & Ransomware | In place | $4 |
| Backup Integrity | Host & Ransomware | In place | $4 |
| EDR | Host & Ransomware | In place | $4 |
| File Integrity | Host & Ransomware | In place | $4 |
| Host Monitoring | Host & Ransomware | In place | $4 |
| Malware Analysis | Host & Ransomware | In place | $4 |
| Patch Management | Host & Ransomware | In place | $4 |
| Ransomware Detection | Host & Ransomware | In place | $4 |
| Authentication Posture | Identity & Data | In place | $99 |
| Authority Matrix | Identity & Data | In place | $99 |
| Backup Governance | Identity & Data | In place | $99 |
| Behavioral Analysis | Identity & Data | In observation | $99 |
| Compromised Credentials | Identity & Data | In observation | $99 |
| Data Classification | Identity & Data | In place | $99 |
| Database Posture | Identity & Data | In place | $99 |
| Encryption at Rest & Key Management | Identity & Data | In place | $99 |
| Leak Prevention | Identity & Data | In place | $99 |
| OAuth & Federation | Identity & Data | In place | $99 |
| Personal Data Discovery | Identity & Data | In place | $99 |
| Privacy Compliance | Identity & Data | In place | $99 |
| Privileged Access | Identity & Data | In observation | $99 |
| Session Security | Identity & Data | In place | $99 |
| Adversarial Load Testing | Offensive Validation | In observation | $199 |
| Attack Simulation | Offensive Validation | In observation | $199 |
| Detection Validation | Offensive Validation | In observation | $199 |
| Exploit Chains | Offensive Validation | In place | $199 |
| Mutation Testing | Offensive Validation | In place | $199 |
| Pentest Report | Offensive Validation | In place | $199 |
| Proof by Exploitation | Offensive Validation | In observation | $199 |
| Symbolic Execution | Offensive Validation | In place | $199 |
| Vulnerability Reachability | Offensive Validation | In place | $199 |
| Automated Response | Operations & Response | In place | $149 |
| Bug Bounty Program Watch | Operations & Response | In place | $149 |
| Decoys | Operations & Response | In place | $149 |
| Detection Rules | Operations & Response | In place | $149 |
| Findings Prior Art | Operations & Response | In place | $149 |
| Forensics | Operations & Response | In place | $149 |
| Incident Management | Operations & Response | In place | $149 |
| Indicators of Compromise | Operations & Response | In place | $149 |
| Log Collection & Correlation | Operations & Response | In place | $149 |
| New CVE Alerting | Operations & Response | In place | $149 |
| Orchestration Playbooks | Operations & Response | In place | $149 |
| Public Audits & Contests | Operations & Response | In place | $149 |
| Real-world Exploitability | Operations & Response | In place | $149 |
| Threat Hunting | Operations & Response | In place | $149 |
| Underground Monitoring | Operations & Response | In observation | $149 |
| Vulnerability Feeds | Operations & Response | In place | $149 |
| Web3 Incident Corpus | Operations & Response | In place | $149 |
| Cross-chain Security | Smart Contract Verification | In place | $50 → $20 |
| Deployed Drift | Smart Contract Verification | In place | $50 → $20 |
| Economic Security | Smart Contract Verification | In place | $50 → $20 |
| Fork Diff | Smart Contract Verification | In place | $50 → $20 |
| Invariants & Properties | Smart Contract Verification | In place | $50 → $20 |
| Multi-ecosystem | Smart Contract Verification | In place | $50 → $20 |
| Multi-model Panel | Smart Contract Verification | In place | $50 → $20 |
| On-chain Monitoring | Smart Contract Verification | In place | $50 → $20 |
| Solidity Static Analysis | Smart Contract Verification | In place | $50 → $20 |
| Source Verification | Smart Contract Verification | In place | $50 → $20 |
| Anti-DDoS & Rate Limiting | Surface & Network | In observation | $69 |
| Attack Surface Management | Surface & Network | In place | $69 |
| Bot Defense | Surface & Network | In observation | $69 |
| Certificates & PKI | Surface & Network | In place | $69 |
| DNS Filtering | Surface & Network | In place | $69 |
| DNS Posture | Surface & Network | In place | $69 |
| External Exposure | Surface & Network | In place | $69 |
| Flow Analysis | Surface & Network | In place | $69 |
| HTTP Headers | Surface & Network | In place | $69 |
| NDR | Surface & Network | In place | $69 |
| Network Intrusion Detection (IDS) | Surface & Network | In place | $69 |
| Segmentation Validation | Surface & Network | In place | $69 |
| Service Discovery | Surface & Network | In place | $69 |
| TLS Configuration | Surface & Network | In place | $69 |
| WAF / Inline Protection | Surface & Network | In observation | $69 |
| Wireless Security | Surface & Network | In observation | $69 |
| Zero Trust & Access | Surface & Network | In place | $69 |
| Governance & Upgradability | Web3 Monitoring | In place | $39 |
| MEV & Ordering | Web3 Monitoring | In place | $39 |
| On-chain Compliance | Web3 Monitoring | In place | $39 |
| Scam Detection | Web3 Monitoring | In place | $39 |
| Wallet Security | Web3 Monitoring | In place | $39 |
In observation rows are shown for transparency only — they are not sold as delivered and are excluded from what a forfait bills for today.
Questions people actually ask
Which currency are prices in?⌄
USD. Prices shown on this page are before any tax; Sentinelleai does not add tax to any invoice.
How does billing actually work?⌄
Subscribing opens a Stripe-hosted Checkout page. Card data is entered on Stripe's own page and never touches Sentinelleai's servers.
How do I cancel or change a plan?⌄
Use the "Manage billing" button above. It opens the Stripe Customer Portal, where plans, payment methods, and cancellation are handled directly.
What does "in observation" mean?⌄
The function is on a plan's roadmap but is not fully delivered yet. It is shown for transparency and is never billed as delivered — only functions marked "in place" count toward what a plan sells today.
Can Sentinelleai unpause my contract?⌄
No. The service holds a pauser role only; its transaction list contains exactly one function, pause(), and it refuses to start if that list is widened. Reopening stays with your owner or multisig. Disarming the watch never unpauses.
Can Sentinelleai unlock my site?⌄
No. Release is always your command or an rm of the flag file over SSH — Sentinelleai never releases a lock on its own, and there is no auto-expiry.
Why do I have to sign a consent for Auto-pause, Site lockdown, or Host containment?⌄
All three act on your production on your behalf — a money-bearing contract, a live web server, or a process and network on that server. A wrong configuration on any one of them can cause very large losses, so the consent records that you actually read the instructions before Sentinelleai starts acting for you.
Can containment take my server offline?⌄
Yes — that is exactly what network isolation does, on purpose, and it is reversible with a time limit rather than permanent. A kill can also stop a legitimate job if the agent attributed a CRITICAL alert to the wrong process. Both are why containment is a separate, consent-gated add-on rather than something turned on for you by default.