Cost guide
Vulnerability Scanning and Assessment Cost
Vulnerability scanning is $1,500 per scan for up to 250 devices and $2,500 for 251 to 1,000 devices, with larger estates quoted and recurring plans available for ongoing coverage. Each scan is run and tuned by our team, validated by an analyst who removes false positives, and delivered as a prioritized, deduplicated report you can act on. A vulnerability assessment is priced on the same tiers.
Up to 250 devices
One validated scan of up to 250 devices, internal or external, authenticated or unauthenticated, with false positives removed and findings ranked by risk.
251 to 1,000 devices
One validated scan of a larger estate, with the extra analyst time that validating results across up to 1,000 devices takes. Over 1,000 devices is quoted from the scope.
What moves the number
What drives the cost of vulnerability scanning and assessment
Internal or external scope
Whether you need the internet-facing perimeter, the internal estate, or both determines how many scans a full picture takes. Each scan is priced by the number of devices in it.
Authenticated versus unauthenticated
Authenticated scans, run with credentials on the host or application, find several times more than an unauthenticated pass and are the more useful of the two. Both are priced at the same per-scan rate.
Size of the estate
Device count sets the price: $1,500 for up to 250 devices and $2,500 for 251 to 1,000, because validating results across a larger estate takes more analyst time. Over 1,000 devices, or a fast-changing estate, is quoted from the scope or run as a program.
Frequency and recurring plans
One baseline scan starts at $1,500. Quarterly or monthly programs, which PCI DSS and most auditors expect, bill the same per-scan price each cycle and are agreed as one fixed annual figure, so the year’s cost is known up front.
Where it fits with testing
Scanning is not a penetration test. Folding recurring validated scans and manual test windows into one program keeps ongoing coverage and audit evidence on a single fixed annual price rather than separate purchases.
In the price
What every vulnerability scanning and assessment price includes
- ✓A validated scan of a defined scope, internal or external, authenticated or unauthenticated
- ✓Analyst validation with false positives removed and findings ranked by risk
- ✓A prioritized, deduplicated report, with recurring plans available for ongoing coverage
- ✓A fixed price agreed in writing before work begins, with no hourly billing
- ✓An executive summary for leadership and a full technical report (request a sample vulnerability scanning report)
- ✓A free re-scan to verify remediated findings, with the report updated to show them closed
- ✓An attestation of the scanning performed and findings platform access at no extra cost
- ✓Senior in-house analysts and testers, no subcontractors or crowdsourced testers
Keep it tight
How to keep the price down
- 01Provide credentials for authenticated scanning. It finds several times more than an unauthenticated pass, so the same scan fee returns far more value on the systems that matter.
- 02Confirm the scope of hosts and applications before the scan. An accurate device count keeps the price predictable and avoids paying to scan assets that are out of scope.
- 03Fix and rescan inside the cycle. The re-scan of remediated findings is included, so closing findings before the next scheduled scan costs nothing extra and keeps the next report short.
- 04Fold scanning and manual testing into one program. A single fixed annual price for scans plus test windows costs less to run than buying each piece separately through the year.
Timeline
Onboarding begins within 24 hours of a signed proposal, and a scan usually starts within a week of scoping, sooner once scope and credentials are confirmed. A single validated scan is quick to run; the analyst validation and prioritized report follow within days. Recurring plans run on the cadence you set, whether monthly or quarterly.
FAQ
Questions about vulnerability scanning and assessment cost
01How much does a vulnerability scan cost?
A validated scan is $1,500 for up to 250 devices and $2,500 for 251 to 1,000 devices, with larger estates quoted. Recurring plans for ongoing coverage bill the same per-scan price each cycle, agreed as one fixed annual figure. Starting prices for every service are on the pricing page.
02Why does a scan cost more than free or automated tools?
Because the scan is not the product. The fee covers running and tuning the scanner, an analyst validating the results, removing false positives, and ranking findings by real risk, so your team fixes genuine issues rather than wading through raw scanner noise. Our vulnerability assessment report template shows what a validated report contains that a raw export does not.
03What changes the cost across a scanning program?
Each scan is priced by device count: $1,500 up to 250 devices, $2,500 up to 1,000. Beyond that, what varies is how many scans a full picture needs: internal and external, authenticated and unauthenticated, and how often you run them. Quarterly or monthly programs are priced as a recurring plan and run as a vulnerability management program, with remediation tracked and every fix rescanned.
04Is a scan the same as a penetration test?
No. A scan finds known weaknesses across many systems quickly; a penetration test manually exploits and chains issues to prove real impact. Most programs use scanning continuously and testing periodically. Our testing program combines both on one fixed annual price.
05How can we get the most from the scan fee?
Provide credentials for authenticated scanning, which finds several times more than an unauthenticated pass, confirm the scope of hosts and applications up front, and move to a recurring plan if you scan regularly, which matches what PCI DSS and most auditors expect. Our network vulnerability assessment checklist lists what to prepare before the scan.
06Is a vulnerability assessment priced the same way?
Yes. An analyst-led vulnerability assessment uses the same device tiers: $1,500 for up to 250 devices and $2,500 for up to 1,000. It adds exploitability notes on the findings that matter and remediation guidance in priority order.
07Do you provide ASV scans for PCI DSS?
Yes. We deliver the quarterly external ASV scan that Requirement 11.3.2 calls for. Our validated internal scans cover the quarterly internal scans under Requirement 11.3.1, which do not need an ASV. Tell us you need ASV scans during scoping and they go into the same written fixed price. Our guide to ASV scans vs penetration tests explains what PCI DSS requires from each.
Other cost guides
Web Application Penetration Testing Cost
From $5,200API Penetration Testing Cost
From $4,000Mobile Application Penetration Testing Cost
From $6,000Red Team Assessment Cost
From $12,500Cloud Penetration Testing Cost
From $6,800External Network Penetration Testing Cost
From $4,200Internal Network Penetration Testing Cost
From $6,000Secure Code Review Cost
From $4,800AI and LLM Penetration Testing Cost
From $4,500Phishing and Social Engineering Testing Cost
From $3,600Hardware and IoT Penetration Testing Cost
From $5,200Microsoft 365 Security Assessment Cost
From $4,200Physical Penetration Testing Cost
From $6,800Wireless Penetration Testing Cost
From $3,800Thick Client Penetration Testing Cost
From $6,000Salesforce Penetration Testing Cost
From $5,200Get the exact number for your scope
Tell us what needs testing. You get a written fixed price within one business day, and the number does not move once testing starts.
Prefer the full scoping questionnaire?Get a Fixed-Scope Quote
Tell us what you need tested. We reply within one business day.
Thanks, we've received your message.
We'll be in touch shortly.