Choose the operating model before the quote.
Every plan uses Workbench for authorized scanning, triage, and evidence review. Pricing is scoped in writing because deployment, identity, governance, and support requirements differ.
- No self-serve checkout or hidden trial conversion
- Professional, Business, and Enterprise use the hosted Workbench
- MSSP self-hosts with online licensing
What changes between plans
The assessment model stays consistent. Team operation, governance, support, and deployment are what change.
Professional
Focused AppSec teams operating authorized assessments in the hosted Workbench.
- DAST, SAST, SCA, IaC, and secrets in one project
- MFA, Slack, and SBOM export
- HTTP records and OAST callbacks on every finding
Business
Teams that share administration around the same assessment workflow.
- Everything in Professional
- Agentic DAST
- Shared users, projects, API keys, and RBAC admin
- Microsoft Teams
Enterprise
Organizations that need contracted identity, governance, and support before provisioning.
- Everything in Business
- SSO (OIDC and SAML)
- Audit log, Jira, custom branding, unlimited seats
- Compliance-oriented reports — not a certification
MSSP
Service providers that operate their own Workbench under an online license.
- Self-hosted Workbench with online licensing
- No air-gapped or offline SKU
- Multi-tenant portfolio operations with the same authorization and evidence boundaries