Simple, honest pricing
built for real work.
Start free. Upgrade when you need the full check library, higher limits, and every export format. No hidden fees, no seat-based pricing games, cancel anytime.
Perfect for testing your own projects, learning how vulnerability scanning works, or cleaning up small websites.
- 5 scans per month
- Up to 25 pages per scan
- Configuration and header checks
- CSV export
- 7-day scan history
- Community support
Full-power scanning for professionals running real engagements. All checks, higher limits, scheduled scans, priority queue.
- 200 scans per month
- Up to 1,000 pages per scan
- All 83 checks across 10 OWASP categories
- CSV, Excel, JSON, HTML, Markdown, SARIF exports
- 1-year scan history
- Scheduled scans (up to 10)
- Email and webhook notifications
- Priority scan queue
- Email support
Free tier first · cancel or upgrade anytime
What you get at each tier
| Feature | Free | Pro |
|---|---|---|
| Scans per month | 5 | 200 |
| Pages per scan | 25 | 1,000 |
| Crawl depth | 2 | 10 |
| Check categories | 2 of 10 | 10 of 10 |
| Export formats | CSV | All 6 |
| Scan history | 7 days | 1 year |
| Scheduled scans | — | Up to 10 |
| Email notifications | — | Yes |
| Webhook notifications | — | Yes |
| Priority queue | — | Yes |
| Support | Community |
Frequently asked
Do I need a credit card to start?
No. The Free tier works with just a username and email. You only enter payment details if you decide to upgrade to Pro.
How does payment work?
Payments are handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. When you click Upgrade, you'll be redirected to Stripe's secure checkout page to enter your card. VulnHawk never receives or stores your card details.
Can I cancel Pro anytime?
Yes. Cancel from your dashboard or the Stripe customer portal. You keep Pro access until the end of the current billing period, then drop back to Free.
What happens to my scans if I downgrade?
Scans older than 7 days are removed. Your account is preserved. Scheduled scans are paused (not deleted) and resume if you re-upgrade.
Can I use VulnHawk on any site?
No. You may only scan systems you own or have explicit written permission from the owner to test. Every account must accept our Ethical Use Disclaimer at signup, and every scan requires a scope acknowledgement.
What payment methods do you accept?
All major credit and debit cards via Stripe, including Apple Pay and Google Pay where available. Invoicing is available on request for annual plans.
Is there an API?
Yes — Pro users can create API keys from the admin panel. Docs are coming soon.
Ready to scan?
Start free in under a minute. Upgrade when you're ready for more.