# Detectify pricing: plans, units and extras

Source: https://pentestcompare.com/pricing/detectify/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Detectify pricing as published on 9 November 2026: four annual tiers from EUR 0 to EUR 15,000, a EUR 500 PCI ASV add-on, what is extra, and a quote checklist.

> **Short answer:** Detectify publishes annual platform fees: Starter from EUR 0, Standard from EUR 2,500, Professional from EUR 5,000 and Enterprise from EUR 15,000 per year, plus PCI ASV scanning at EUR 500 per year. Added domains, environments and IP ranges cost extra and their prices are not stated. Detectify is automated scanning, not a human-led pentest. Figures checked 9 November 2026.

Detectify is an automated scanner with published annual fees. This page lists them with their units, from [Detectify's pricing page](https://detectify.com/pricing), read on 9 November 2026.

## What does Detectify publish about price?

Detectify publishes four annual tiers and one add-on, all in euros.

| Plan | Price | Unit | What it covers | Checked |
|---|---|---|---|---|
| Starter | from EUR 0 | per year (annual platform fee) | Up to 5 users, 1 team; REST and GraphQL API scanning, email support | 9 Nov 2026 |
| Standard | from EUR 2,500 | per year (annual platform fee) | Up to 10 users, 1 team; SSO, 2 hours of expert onboarding | 9 Nov 2026 |
| Professional | from EUR 5,000 | per year (annual platform fee) | Unlimited users, 2 teams; internal scanning in one environment, all integrations, 5 hours onboarding, CSM | 9 Nov 2026 |
| Enterprise | from EUR 15,000 | per year (annual platform fee) | Unlimited users and teams; custom modules, 3 internal scanning agents, SLA, 15 hours onboarding | 9 Nov 2026 |
| PCI ASV Scanning | EUR 500 | per year | Add-on on all tiers | 9 Nov 2026 |

Source for every row: [Detectify pricing](https://detectify.com/pricing). "From" means the starting fee. Non-profits get 30% off.

## What is the price unit, and what does it buy?

The unit is an annual platform fee, and it buys access to scanning, not a test. The fee sets users, teams, support and integrations. It does not give a fixed number of tests or a report from a human tester.

That difference matters when you compare with a pentest price. A per-test price from a pentest provider pays for a defined scope and a report. A platform fee pays for continuous scanning of the domains you add. Read [pentest vs vulnerability scan](/guides/pentest-vs-vulnerability-scan/) before you put the two in one budget line.

Use the tier cards to match a tier to a requirement:

| If you need | Lowest tier that lists it |
|---|---|
| REST and GraphQL API scanning, up to 5 users | Starter |
| SSO, 2 hours of expert onboarding | Standard |
| Internal scanning in one environment, a CSM | Professional |
| Custom modules, 3 internal scanning agents, an SLA | Enterprise |

## What costs extra or is not stated?

Added assets are extra, and their prices are not published. The pricing page says added assets, domains, environments and IP ranges cost extra. It states no per-domain or per-target price.

| Item | Status on 9 Nov 2026 |
|---|---|
| Per-domain add-on price | Not published |
| Per-target add-on price | Not published |
| Added environments and IP ranges | Cost extra; amount Not published |
| API scanning on Starter | Included on the card; extra per target in the comparison table |
| Non-profit discount | 30% off |

The two statements about API scanning conflict. Treat the table as the cautious reading and ask Detectify to confirm what Starter includes.

## What do retests and turnaround look like?

Neither is stated. The pricing page does not describe retesting, and Detectify publishes no turnaround and no sample report. A scanner can re-scan on a schedule, but the page does not say whether a re-scan after a fix is included or limited. Ask for it in writing.

## How does Detectify compare in structure with other providers?

Detectify sells a subscription, and a few other providers in the dataset also publish subscription prices. The units differ, so the figures do not cover equal work. A to Z, checked 9 November 2026:

| Provider | Published price | Unit |
|---|---|---|
| [Astra Security](/providers/astra-security/) | $699 (Scanner Lite, annual) | per target |
| [Pentest-Tools.com](/providers/pentest-tools/) | from $140 (AppScan) | per month, 5 assets |
| [ZeroThreat](/providers/zerothreat/) | $100 (Professional) | per target per month |

For the full range of units, read the [penetration testing cost guide](/guides/penetration-testing-cost/). The [automated pentesting tools guide](/guides/automated-pentesting-tools/) covers where scanners fit.

## Who do the published Detectify prices suit?

They suit teams that want continuous automated web and API scanning with annual platform fees they can read before a call. That is the best fit in our dataset. The tradeoffs are as stated above: it is automated scanning only, so it does not replace a human-led pentest, add-on costs for domains and targets are not published, and there is no sample report.

Integrations listed on the pricing page include an MCP server, CI/CD, SSO (Okta, Ping Identity, OneLogin, SAML 2.0) and AWS Marketplace billing. The Standard tier adds SSO. Professional and Enterprise add more users, teams and internal scanning. If you need internal scanning in more than one environment, the comparison table decides the tier, so read it next to the cards.

Compliance mentions on the page are ISO 27001 (a page linked in the footer), GDPR and PCI ASV. We did not check an ISO 27001 certificate, so we do not list one as a credential.

## What should a Detectify quote request include?

Send the same asset list to every vendor, then ask Detectify for these items in writing:

1. The number of domains, subdomains and IP ranges included in the tier, and the price of each addition.
2. Whether API scanning is included on your tier, and at what per-target cost.
3. What the fee includes for internal scanning: environments and agents.
4. The PCI ASV add-on scope, if you need it.
5. Whether a re-scan after a fix is included.
6. Billing options (direct or AWS Marketplace) and the renewal terms.
7. The quote expiry date.

The [scoping checklist](/tools/scoping-checklist/) builds the asset list in your browser.

Found an error or a newer Detectify page? [Send a correction](/methodology/#corrections).

## Questions

### How much does Detectify cost?

Detectify lists annual platform fees from EUR 0 (Starter), EUR 2,500 (Standard), EUR 5,000 (Professional) and EUR 15,000 (Enterprise) per year. PCI ASV scanning is EUR 500 per year. Added domains and targets cost extra, and those prices are not published.

### Is Detectify a pentest?

No. The pricing page lists automated surface monitoring and application and API scanning. No human-led pentest is listed. A scan finds known issue classes. A pentest adds human testing of logic and access control.

### Does Detectify offer a discount?

The pricing page states 30% off for non-profits. It publishes no other discount. Ask whether annual billing, AWS Marketplace billing or multi-year terms change the fee.

### Does API scanning cost extra on the Starter plan?

The page is inconsistent. The Starter card says REST and GraphQL API scanning is included, while the comparison table lists API scanning at extra cost per target. Ask Detectify to confirm in writing.

## Sources

- [Detectify pricing](https://detectify.com/pricing)
- [Detectify contact](https://detectify.com/contact)