💳 Transparent Pricing

Start Free. Scale as You Comply.

Your data is stored and processed in the EU, with cryptographic audit trails on every finding. Some AI analysis uses a provider hosted outside the EU, minimised and never used to train models. No credit card required to start.

MonthlyAnnual
FREEMIUM
€0forever

No code, no creds — external view only

Get started
  • ✓ Blackbox scan only
  • ✓ Target URL only
  • ✓ Automated LLM scan only
  • ✓ OWASP Top 10 surface mapping only
  • ✓ 1 pentest scan/month
  • - No credentials / auth testing
  • - No source code analysis
  • - No PoC exploits
  • - No human validation
  • - No compliance reports
PRO I
€431/month

billed monthly · no commitment

Credentials provided — authenticated testing

Talk to Sales
  • ✓ Everything in Freemium
  • ✓ Graybox scan
  • ✓ Business risk assessment reporting
  • ✓ 3 pentest scans/month
  • ✓ Target URL + login credentials
  • ✓ Authenticated session testing
  • ✓ TOTP / 2FA support
  • ✓ Human review + validation
  • ✓ OWASP + SOC2 compliance tagging
  • ✓ PoC reproduction steps
  • ✓ Pentest-grade report (PDF)
  • - No source code analysis
  • - No static code review
PRO II
€1.1K/month

billed monthly · no commitment

Source code + credentials — full-depth pentest

Talk to Sales
  • ✓ Everything in Pro I
  • ✓ Whitebox scan
  • ✓ 5 pentest scans/month
  • ✓ Target URL + source code (ZIP)
  • ✓ Login credentials + TOTP
  • ✓ Static + dynamic correlation
  • ✓ Business logic vulnerability testing
  • ✓ PoC exploits (where authorized)
  • ✓ Human review + validation
  • ✓ Full compliance report (all frameworks)

How Each Tier Works

BLACK-BOX

Get your first pentest in minutes.

No setup. No credentials. Just a URL. breachr's agentic testing engine maps your attack surface against OWASP Top 10 automatically. Free, with 2 scans per month.

Start free →
GRAY-BOX

Authenticated testing, confirmed by a person.

Provide test account credentials and let breachr's agentic engine probe your app from the inside - login flows, authenticated endpoints, session handling, privilege escalation. A named security professional confirms every critical finding before you see it. Each one is then ranked by the Business Risk Engine against your own business profile, so what you fix first reflects your exposure and not a generic severity scale.

🔒 Credentials encrypted end-to-end. Never stored after the scan.

Get started →
WHITE-BOX - EARLY ACCESS

Testing with source access.

The deepest tier - static and dynamic findings correlated, business-logic testing, and every critical finding confirmed by a named security professional. White-box is in early access with a limited number of design partners; join the waitlist to be included.

🔒 Source is encrypted in transit and at rest, and deleted after the scan - with the deletion timestamp in your audit log.

Join the waitlist →

ROI vs Traditional Penetration Testing

A traditional manual engagement is quoted in the tens of thousands and happens once or twice a year. breachr runs continuously, for a subscription.

Traditional engagement
Point-in-time
True on the day it was written
breachr
Continuous
Re-tested as your code changes
Both
Human-confirmed
A named person confirms each finding

Pricing FAQs

Q: What's the difference between Annual and Monthly billing?
A: Annual billing locks in the base rate with no commitment penalty. Monthly billing is available at +25% for full flexibility. Both give you the same features.
Q: What's the difference between Pro I and Pro II?
A: Pro I adds authenticated gray-box testing on top of the black-box scan - login flows, authenticated endpoints, session handling, privilege escalation - with every critical finding confirmed by a named security professional. Pro II adds white-box testing with source access, which is currently in early access.
Q: Can I upgrade between plans mid-month?
A: Yes. We prorate your current subscription and apply the credit to the new plan.
Q: What happens on the free plan?
A: Freemium gives you a black-box scan from just a URL, mapped to the OWASP Top 10, with no credit card. Findings on the free plan are AI-detected - human confirmation is what the paid plans add.
Q: Where does our data live?
A: Stored and processed in the EU (Frankfurt, eu-central-1). Some AI analysis uses a provider outside the EU, minimised and never used to train models for other customers.

No Credit Card. Start in Minutes.

Freemium gets you your first scan today. Upgrade when your obligations grow.

Start Free →Talk to us