# Detectify: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/detectify/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Detectify at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Detectify sells an annual-fee scanning platform covering surface monitoring, application and API scanning and PCI ASV scanning, with published starting prices per tier.
- Website: https://detectify.com/
- Type: Application security platform
- Headquarters: Not published
- Services listed: web-app, api, vuln-assessment
- Delivery: automated. Automated surface monitoring and application scanning; no human-led pentest is listed on the pricing page.
- Scope: Web apps yes; APIs yes; Cloud unknown; Network unknown; Mobile unknown; AI apps unknown
- Pricing model: published
  - Starter: from EUR 0 per year (annual platform fee) (Up to 5 users, 1 team; REST and GraphQL API scanning, email support.) https://detectify.com/pricing
  - Standard: from EUR 2,500 per year (annual platform fee) (Up to 10 users, 1 team; SSO, 2 hours of expert onboarding.) https://detectify.com/pricing
  - Professional: from EUR 5,000 per year (annual platform fee) (Unlimited users, 2 teams; internal scanning in one environment, all integrations, 5 hours onboarding, CSM.) https://detectify.com/pricing
  - Enterprise: from EUR 15,000 per year (annual platform fee) (Unlimited users and teams; custom modules, 3 internal scanning agents, SLA, 15 hours onboarding.) https://detectify.com/pricing
  - PCI ASV Scanning: EUR 500 per year (Add-on on all tiers.) https://detectify.com/pricing
- Pricing note: Per-domain and per-target add-on prices are not stated. Added assets, domains, environments and IP ranges cost extra. Non-profits get 30% off. The Starter card says API scanning is included but the comparison table lists it at extra cost per target.
- Turnaround: Not published
- Retesting: Not stated on the pricing page.
- Sample report: not published 
- Credentials: None with public evidence found
- Compliance mentioned: ISO 27001 (page linked in footer), GDPR, PCI ASV
Good fit when: Teams that want continuous automated web and API scanning with published annual platform fees.
Tradeoffs: Automated scanning only; it does not replace a human-led pentest. Add-on costs for domains and targets are not published. No sample report.
Last checked: 2026-11-09
Sources:
- Detectify pricing: https://detectify.com/pricing (checked 2026-11-09)
- Detectify contact: https://detectify.com/contact (checked 2026-11-09)