Pricing
Free to check. Pay only for testing.
DNS checks are free. Web testing is $180 a year per domain for a test every month, or $100 for a one-off test. No setup fee, card only when you order.
Web penetration testing
Continuous testing is the better deal
Continuous testing costs $180 per domain a year, paid in advance, for 12 tests: $15 a test, 85% less than one-off. The same number of one-off tests would cost $1,200.
Continuous testing
RecommendedA full test now, then a retest every month for a year.
$180per domain · per year
$15 a test, paid yearly in advance
85% less per test than one-off tests
- A full test right away that sets your baseline
- An automatic retest every month, 12 tests a year
- New, fixed and returning findings on every retest
- Advanced DNS checks (5 a day), as in the free account
- Timestamped proof of permission for every test
- Renews every year; cancel any time before the renewal
One-off test
A single full test when you need it.
$100per test
- One full web penetration test
- Findings with severity, evidence and fixes
- Timestamped proof of permission
- $80 off continuous testing of the domain within 30 days
Manual penetration test
A specialist tests your application in depth, including business logic. Priced per scope: email pentest@offensly.com.
Accounts
DNS checks are free. Web testing comes with a paid account.
A free account adds the advanced DNS check of domains you verify. Penetration testing of your website is only in the paid account.
Anonymous
No sign-up, right on the home page.
Free
- 3 basic checks a day, any domain
- Email security DNS checks: SPF, DKIM, DMARC, MX
- Result with fixes on the page
Free account
Advanced DNS checks of your domains. No web testing.
Free
- 5 advanced checks a day on domains you verify
- DNSSEC, CAA, DANE/TLSA, STARTTLS, dangling subdomains
- Plus 3 basic checks a day on any domain
- History and comparison over time
Paid account
Advanced DNS checks plus web testing.
$180per domain · per year
a test every month, or $100 for a one-off test
- Everything in the free account
- Web penetration testing of your verified domains
- DNS checks as in the free account
- Timestamped proof of permission for every test
FAQ
Billing questions
Why is continuous testing a yearly plan?
Most companies test their website once or twice a year. In the months between, new vulnerabilities are published and nobody checks. We think a website should be tested every month, so we made that the cheaper choice: a year of monthly tests costs $180, less than two one-off tests ($200). Paying for the year in advance is what lets us keep the price this low.
Why is a test $15 in continuous testing and $100 one-off?
Continuous testing is a year paid in advance: $180 for 12 tests. The first is a full test of everything in scope that maps your site and records every finding. That record is the baseline; each monthly retest runs the tests again and compares the result with it. A one-off test is the same full test, bought on its own.
Can I switch from a one-off test to continuous testing?
Yes. Start continuous testing of the same domain within 30 days of the one-off test and we take $80 off the first year. Starting with continuous testing straight away still costs less.
What happens after the year?
Continuous testing renews for another year at $180, charged to the same card. Cancel any time in the dashboard: testing continues until the end of the year you paid for, and nothing more is charged.
What if our scope changes?
Small changes are fine. If the scope changes substantially, for example you add new hosts, the next test is a full test that sets a new baseline, because there is nothing to compare the new parts with. It is one of your 12 tests, not an extra charge.
How do I pay?
By card through Stripe, in the dashboard. You add a card only when you order a test.
Do I pay for a test that cannot run?
A one-off test that cannot run is not charged. In continuous testing the year is paid, so nothing is refunded. If a test does not run because of us, that month is free: we extend your year by one month. If it is on your side, you do not lose the test straight away: if your record or file is missing when a test is due, we let you know. Put it back before the next scheduled test and the missed test runs as soon as we verify it; the next one still runs on schedule. Otherwise the missed test is forfeited.