Pricing
Pick a plan and get started today. An active paid subscription is required to create engagements. You can cancel any time.
Roadmap — not in this build
Custom pricing and implementation
Comparison
See how our plans compare across key features.
| Features | Starter | Professional | Enterprise |
|---|---|---|---|
| Users (seats) | 1 | 5 | By quote |
| Proof Packs | ✓ | ✓ | ✓ |
| Safe-Scan Gate | ✓ | ✓ | ✓ |
| Vulnerability scanning | - | ✓ | ✓ |
| Cloud security assessment (AWS, Azure, GCP) | Not available yet — no plan includes it | ||
| API security testing (REST & GraphQL) | Not available yet — preview only | ||
| Jira / ServiceNow / webhook export | Jira, ServiceNow, webhook | Jira, ServiceNow, webhook | Jira, ServiceNow, webhook |
| Support | Priority | Dedicated | |
| SSO/SCIM | - | - | Roadmap |
| On-premise | - | - | Roadmap |
Cloud security assessment and API security testing are shown as unavailable on every plan. No read-only AWS, Azure or GCP client ships in this build, and there is no safe, scoped way to discover a target's real API endpoints, so both check families fail closed and produce no findings rather than reporting assumed ones — we do not sell them. The demo page labels the API inspector “Not available yet — preview only” and shows the shape of a cloud posture review when it arrives.
What an authorization-first workflow gives you — no projected dollar figures we can't stand behind
A signed, timestamped record of who authorized what, before any test runs
Chain-of-custody and control mapping your auditors and clients can verify
Findings, evidence and framework mapping assembled into one deliverable
We don't publish savings estimates: the value depends on your engagements, your tooling and your auditors, and any figure we'd quote here would be an assumption, not a measurement.
PentSeal is in early access. Join the first security teams building provable authorization into their testing.