Pricing that scales with your attack surface

Plans are billed monthly or annually and scale on two meters: application targets for the testing side, and cloud accounts with a resource ceiling for the posture side. Starter, Team, and Compliance have published prices; Enterprise is quoted to your scope, residency, and support requirements. Annual billing includes a discount over monthly.

A target is a single application asset you authorize us to test — a web app, an API, or a network range. Cloud accounts are metered separately, because the work of auditing an AWS account tracks the number of resources in it, not the fact that it exists. Each plan therefore includes a number of targets, a number of cloud accounts, and a pooled cloud-resource ceiling across those accounts. You can add either individually as an add-on without jumping a full tier.

Nothing breaks and no scan is cut off. We'll get in touch to move you to the next tier or add cloud-account capacity, and we'll show you the resource count behind the number so the conversation starts from data rather than a surprise invoice.

Team includes framework-mapped evidence for current framework editions, which is what most teams need. Compliance is for a live audit: every framework edition including superseded ones you may still be certified against, retest-to-closure evidence proving a finding was fixed rather than just filed, signed assessment attestations, and direct push into Vanta, Drata, and Jira.

Yes. You can start a trial from the demo request flow to run RedStrike against assets you own or are authorized to test, and see verified findings before you commit to a plan. No agents to install and no long procurement to get started.

Absolutely. You can upgrade or downgrade at any time. Upgrades take effect immediately and are prorated; downgrades apply at the start of your next billing cycle. Your targets, findings, and history carry over across plan changes.

Annual plans are billed once for the year at a discount compared to twelve monthly payments. If you're weighing budget against coverage, annual is the most cost-effective way to run continuous testing — talk to sales for the current annual rate.

Additional application targets at $29/month each, additional cloud accounts at $79/month each, white-label reporting for MSSPs and consultancies, and a dedicated technical account manager. Early-stage companies under $1.5M raised with fewer than 10 people can take 30% off Starter or Team for the first year.

Yes, and it is included from Team upward rather than sold as an add-on. Verified findings and cloud posture map to versioned framework editions — OWASP Top 10, OWASP API Top 10, PCI DSS, ISO/IEC 27001, SOC 2, NIS2, the Cyber Resilience Act, NIST SP 800-53, HIPAA, and GDPR — with the specific edition labelled on every control, because auditors read version numbers. See the compliance solution page for how the mapping works.

Nothing during your current term. Compliance evidence used to be a paid add-on on Team and is now included; existing Team customers get it at their current price for the rest of the term, and the new rate applies at renewal. Starter customers on the previous $199 price keep it through their term as well.

Every engagement requires you to confirm you own or are permitted to test the target. RedStrike uses non-destructive verification and honors your rules of engagement. Read the security and responsible-disclosure pages for specifics on how testing runs safely.

Yes. MSSPs and consultancies running RedStrike across many client tenants get multi-tenant management, white-label reporting, and volume pricing. Contact sales to scope a partner arrangement.