Detectify pricing: plans, units and extras

Detectify is an automated scanner with published annual fees. This page lists them with their units, from Detectify's pricing page, read on 9 November 2026.

What does Detectify publish about price?#

Detectify publishes four annual tiers and one add-on, all in euros.

Source for every row: Detectify pricing. "From" means the starting fee. Non-profits get 30% off.

What is the price unit, and what does it buy?#

The unit is an annual platform fee, and it buys access to scanning, not a test. The fee sets users, teams, support and integrations. It does not give a fixed number of tests or a report from a human tester.

That difference matters when you compare with a pentest price. A per-test price from a pentest provider pays for a defined scope and a report. A platform fee pays for continuous scanning of the domains you add. Read pentest vs vulnerability scan before you put the two in one budget line.

Use the tier cards to match a tier to a requirement:

What costs extra or is not stated?#

Added assets are extra, and their prices are not published. The pricing page says added assets, domains, environments and IP ranges cost extra. It states no per-domain or per-target price.

The two statements about API scanning conflict. Treat the table as the cautious reading and ask Detectify to confirm what Starter includes.

What do retests and turnaround look like?#

Neither is stated. The pricing page does not describe retesting, and Detectify publishes no turnaround and no sample report. A scanner can re-scan on a schedule, but the page does not say whether a re-scan after a fix is included or limited. Ask for it in writing.

How does Detectify compare in structure with other providers?#

Detectify sells a subscription, and a few other providers in the dataset also publish subscription prices. The units differ, so the figures do not cover equal work. A to Z, checked 9 November 2026:

For the full range of units, read the penetration testing cost guide. The automated pentesting tools guide covers where scanners fit.

Who do the published Detectify prices suit?#

They suit teams that want continuous automated web and API scanning with annual platform fees they can read before a call. That is the best fit in our dataset. The tradeoffs are as stated above: it is automated scanning only, so it does not replace a human-led pentest, add-on costs for domains and targets are not published, and there is no sample report.

Integrations listed on the pricing page include an MCP server, CI/CD, SSO (Okta, Ping Identity, OneLogin, SAML 2.0) and AWS Marketplace billing. The Standard tier adds SSO. Professional and Enterprise add more users, teams and internal scanning. If you need internal scanning in more than one environment, the comparison table decides the tier, so read it next to the cards.

Compliance mentions on the page are ISO 27001 (a page linked in the footer), GDPR and PCI ASV. We did not check an ISO 27001 certificate, so we do not list one as a credential.

What should a Detectify quote request include?#

Send the same asset list to every vendor, then ask Detectify for these items in writing:

1. The number of domains, subdomains and IP ranges included in the tier, and the price of each addition.
2. Whether API scanning is included on your tier, and at what per-target cost.
3. What the fee includes for internal scanning: environments and agents.
4. The PCI ASV add-on scope, if you need it.
5. Whether a re-scan after a fix is included.
6. Billing options (direct or AWS Marketplace) and the renewal terms.
7. The quote expiry date.

The scoping checklist builds the asset list in your browser.

Found an error or a newer Detectify page? Send a correction.