For managers
Know your website is tested. Every month, with proof.
Continuous security testing of your website every month for $180 a year. You see what is critical now, what your team has fixed, and you keep a timestamped record that testing happened.
- $180
- a year per domain, 12 tests
- $15
- per test, paid yearly in advance
- 1 month
- between automatic retests
- 1 record + 1 file
- for your team to add, once
The risk
Websites change faster than annual tests
New vulnerabilities are published every day. Your site gets plugin updates, new pages, configuration changes. A penetration test from last spring says little about today.
Most attacks on company websites use known, published weaknesses, not new ones. Finding those quickly is what regular automated testing is for.
Email is the other exposure. Without SPF, DKIM and DMARC anyone can send email that appears to come from your company, to your customers and your staff. The free check shows whether that is possible for your domain right now.
What you get
A view you can act on, and evidence you can show
Risk by severity
Each run sums up findings as Critical, High, Medium and Low, and shows what is new and what your team fixed since the last run. One look tells you whether things are getting better.
Proof for audits and customers
Every test is recorded with its scope and date, and the permission behind it is sealed with a qualified eIDAS timestamp. When a customer, auditor or insurer asks whether you test your website, you can show it.
Little work for your team
No software to install. Your team adds one small file to the website and gets findings that say exactly what to change, so fixing them does not start with research.
Regular vulnerability testing is part of what NIS2 and ISO 27001 expect from organisations. Offensly gives you the record that it happens; it does not certify compliance on its own.
Getting started
Running in a day
- 01
Sign in
With a Google account. No card until you order a test. - 02
Your team adds a file
A file on the website proves it is yours and is the permission to test it. - 03
Tests run on their own
Every month. You see the summary; your team sees the fixes.
Cost
Predictable, once a year
Continuous testing costs $180 per domain a year, paid in advance: a full test right away, then a retest every month. The same 12 tests bought one-off would cost $1,200.
Continuous testing
RecommendedA full test now, then a retest every month for a year.
$180per domain · per year
$15 a test, paid yearly in advance
85% less per test than one-off tests
- A full test right away that sets your baseline
- An automatic retest every month, 12 tests a year
- New, fixed and returning findings on every retest
- Advanced DNS checks (5 a day), as in the free account
- Timestamped proof of permission for every test
- Renews every year; cancel any time before the renewal
One-off test
A single full test when you need it.
$100per test
- One full web penetration test
- Findings with severity, evidence and fixes
- Timestamped proof of permission
- $80 off continuous testing of the domain within 30 days
Questions managers ask
Before you decide
Why is continuous testing a yearly plan?
Most companies test their website once or twice a year. In the months between, new vulnerabilities are published and nobody checks. We think a website should be tested every month, so we made that the cheaper choice: a year of monthly tests costs $180, less than two one-off tests ($200). Paying for the year in advance is what lets us keep the price this low.
Why is a test $15 in continuous testing and $100 one-off?
Continuous testing is a year paid in advance: $180 for 12 tests. The first is a full test of everything in scope that maps your site and records every finding. That record is the baseline; each monthly retest runs the tests again and compares the result with it. A one-off test is the same full test, bought on its own.
Does this replace the penetration test our consultant does?
No, it complements it. A manual test goes deep once in a while; Offensly checks for known weaknesses every month in between. Many problems appear in the months between manual tests.
We can do the manual test as well. Email pentest@offensly.com with what needs testing and by when, and we send you a scope and a price.
Is it legal to test our website?
Yes, because you give permission. Testing runs only on domains or IP addresses you verify, in the scope and time window you confirm, and we keep a timestamped record of that permission.
Can it disrupt our website?
Tests run in the time window you choose, so you can schedule them outside busy hours. Tell your hosting provider if their terms ask for notice of security testing.
How do we pay?
By card through Stripe: $100 for a one-off test, or $180 a year in advance for continuous testing of a domain, renewed yearly until you cancel. A one-off test that cannot run is not charged. DNS checks stay free (5 advanced checks a day with a free account).
Start with a free check of your domain
It takes seconds and shows whether others can send email in your company's name.