💳 Transparent Pricing

Start Free. Scale as You Comply.

Every plan runs on EU servers, with cryptographic audit trails on every finding. No credit card required to start.

MonthlyAnnualSAVE 20%
FREEMIUM
$0forever

No code, no creds — external view only

Get started
  • ✓ Target URL only
  • ✓ Automated LLM scan (no human review)
  • ✓ OWASP Top 10 surface mapping
  • ✓ Up to 2 scans/month
  • — No credentials / auth testing
  • — No source code analysis
  • — No PoC exploits
  • — No human validation
  • — No compliance reports

Engine: Shannon (recon + vuln phases only) via OpenRouter — lightweight model, 50K token cap, ~20 min

STARTER
$2.3K/year

$190/mo · billed annually

Best for small companies

Start trial
  • Feature list
  • ✓ All of Freemium
  • ✓ Cryptographic chain audit
  • ✓ 20 target systems
  • ✓ 10 targeted scans per month
  • ✓ Remediation reports
  • ✓ Export findings
  • ✓ 10 monthly active users
  • ✓ Web
  • ✓ 100,000 tokens for AI
PROFESSIONAL
$5.5K/year

$457/mo · billed annually

For advanced larger companies

Start Today
  • Feature list
  • ✓ All of Starter
  • ✓ 100 target scan/mo.
  • ✓ 1M tokens AI scanning
  • ✓ 50 monthly active users
  • ✓ All scan types
  • ✓ Inventory management
  • ✓ CREST pen-tester on call

How Each Tier Works

BLACK-BOX

Get your first pentest in 20 minutes.

No setup. No credentials. Just a URL. breachr's agentic testing engine maps your attack surface against OWASP Top 10 automatically. Free, with 2 scans per month.

Start free →
GRAY-BOX

Authenticated testing, human-validated results.

Provide test account credentials and let breachr's agentic engine probe your app from the inside — login flows, authenticated endpoints, session handling, privilege escalation. A breachr pentester reviews every finding before you see it.

🔒 Credentials encrypted end-to-end. Never stored after the scan.

Get started →
WHITE-BOX

Full source code analysis.

Upload your repo as a ZIP and get the deepest pentest available — static + dynamic correlation, business logic testing, PoC exploits. All compliance frameworks: OWASP, SOC2, PCI-DSS, ISO 27001, NIST CSF.

🔒 Source code encrypted in transit and at rest. Deleted immediately after the scan — deletion timestamp shown in your audit log.

Get started →
RED TEAM — COMING SOON

Full Agentic Red Teaming.

Multi-agent adversarial simulation. Autonomous attack chains, lateral movement, and privilege escalation — all with human-validated results. Enterprise only.

Notify me when available →
⚔️

DORA Article 26 TLPT Add-On

Full TIBER-EU framework Threat-Led Penetration Testing. Required for "significant entities" every 3 years. Includes CREST-certified red team, threat intelligence provider, BaFin notification support, and management board reporting templates.

€120K–€200K
per engagement · every 3 years

ROI vs Traditional Penetration Testing

Manual pentesting costs €80K–€300K per annual engagement. breachr Professional costs €4,200/year.

Traditional annual pentest
€120K+
3 × €40K engagements
breachr Professional annual
€4,200
€350/month × 12
Annual saving
€115K+
Plus continuous vs point-in-time

Pricing FAQs

Q: What's the difference between Annual and Monthly billing?
A: Annual billing locks in the base rate (Starter €159/mo, Professional €350/mo) with no commitment penalty. Monthly billing is available at +25% (Starter ~€199/mo, Professional ~€438/mo) for full flexibility. Both give you the same features.
Q: What's the difference between Starter and Professional?
A: Starter is designed for smaller teams beginning their compliance journey — 5 targets, 20 scans/month, basic compliance reports at €159/mo (€1,908/yr). Professional adds QSA-grade PCI DSS reports, BaFin/NCA-grade DORA and NIS2 reports, 10 targets, 50 scans, and priority support at €350/mo (€4,200/yr). Most teams under active PCI DSS or DORA obligations need Professional.
Q: Can I upgrade between plans mid-month?
A: Yes. We prorate your current subscription and apply the credit to the new plan. Most teams start Starter or Professional, then upgrade to Enterprise when TLPT, CDE scoping, or on-premise deployment becomes required.
Q: What's included in the 14-day free trial?
A: Full Professional tier access — 10 targets, 50 scans, all integrations, PCI DSS, DORA + NIS2 reports. No credit card required. Extends to 30 days if you schedule a demo call.
Q: Do you support on-premise deployment?
A: Yes — Enterprise tier supports air-gapped on-premise installation and customer cloud (AWS/Azure/GCP in your account). This is a hard requirement for many central banks and insurance companies.

No Credit Card. Start in Minutes.

Freemium gets you your first scan today. Upgrade when your obligations grow.

Start Free →Book Enterprise Demo