Pricing

Priced by what you protect.
Not by how much you use.

SpartanX is licensed by asset. You cover the attack surface you choose, and you attack it as often as your security needs, once a year or every day, with no token meters, no credits, and no per-scan fees.

What the license meters
Assets you cover
Licensed
Concurrency
Licensed
Tests you run
Unlimited
AI tokens
Unlimited
Named users
Unlimited
Retests after a fix
Unlimited

Two lines are licensed. Everything else is unlimited.

The difference, in one line

Move the cadence. Watch one line move.

Consumption pricing charges you for every run, so the cost of testing rises with the thing you most want to increase. Asset-based licensing does not. Drag the control and see which line notices.

Annual cost of testing every monthConsumption pricingSpartanX
0×3.4×6.7×10×13×Yearly2×/yrQuarterlyMonthlyWeeklyDaily12×1×Relative annual cost, indexed so one test a year = 1×. Illustrates the two models, not a SpartanX quote.
Once a yearEvery day
Consumption pricing
12×

Every run draws down a balance, so the cost of testing rises with the thing you most want to increase.

SpartanX
1×

Same license, same price. The cadence is a security decision, never a billing one.

The shift

Security has always been priced by asset.
AI pricing forgot that.

Then AI arrived, and most offensive and exposure tools started billing by credits, tokens, or consumption. Every scan, every run, and every retest now draws down a balance, so teams ration the one thing security should never ration: testing.

Most AI security tools

You pay to use it

  • Billed by credits, tokens, or runs
  • Every scan draws down a balance
  • Costs spike the more you test
  • Continuous testing becomes a surcharge
  • Budget is hard to predict
SpartanX

You pay to cover it

  • Licensed by the assets you cover
  • Run once a year or every day on one license
  • Testing more never changes the bill
  • Continuous is built in, not an upsell
  • Budget is predictable and maps to your estate

Only a few vendors price this way, and we think it is the only model that makes continuous security affordable.

Assets

Count your estate, not your endpoints.

An asset is an independently addressable target. The entry point is the asset, and everything reachable through it, the endpoints, ports, pages, and parameters, is tested as depth, not counted separately. So the size of an application never inflates your count.

Network IP
Its ports and services are tested beneath it
24
Web Application
Every page, parameter and flow counts as depth
6
API
REST, GraphQL or SOAP, all endpoints included
8
Cloud Resource
AWS, Azure or GCP
10
AI Service
LLMs and agents, plus the data path around them
2
Mobile Application
iOS or Android, with its backend calls
1
Code Repository
GitHub, GitLab or Bitbucket
5
Blockchain
Contracts and their on-chain surface
0
Read the full asset definition, edge cases, and checklist on the Scope page
Your license covers
56assets

Across 7 kinds of asset. Everything reachable beneath each one is tested as depth, at no extra count.

Tests per year
Unlimited
Named users
Unlimited
Depth beneath each asset
Included
Get a quote for this scope

A scope, not a price. We size a quote to your estate and how you plan to use the platform.

How it works

How SpartanX pricing works

The license is simple on purpose. You cover the assets you choose, and the platform is yours to run as hard as your security needs.

01

License by asset

You license the attack surface you want covered. An asset is an independently addressable target, a web application, an API, an AI system, an IP, and more. Adding tests never adds an asset.

02

Run as often as you need

Attack, chain, and retest as much as your program requires. Once a year for an audit, or continuously. The cadence is yours, and it does not change your price.

03

No consumption, ever

No AI token metering, no per-scan fees, no credits, and no compute billing. The adversary can run all day without drawing down a balance.

04

Concurrency is set by your license

Need more running in parallel? Your license defines how many tests run at once, sized to your program. Raise it when you need more throughput.

Standard in every license:The full platformReportingSingle sign-on and SAMLVendor managementUnlimited named users
No meters

No tokens. No credits. No per-scan fees. No metered compute. Run the adversary as often as your security needs, and your bill does not move.

FAQ

Questions about pricing

No. There is no token metering, no credit balance, and no per-scan fee. You license the assets you want covered, and running the adversary does not draw anything down.

By the attack surface you license, measured in assets. We size a quote to your estate and how you plan to use the platform. Reach out through Get started and we will tailor it.

An asset is an independently addressable target, such as a web application, an API, an AI system, or an IP. Everything reachable beneath it, the endpoints, ports, pages, and parameters, is tested as depth and not counted separately. The full definition, with edge cases and a checklist, lives on our Scope page.

Yes. Once a year, once a month, or continuously. The cadence is yours, and it does not change your price.

No. The number of tests you run is unlimited, and continuous testing is built in, not a surcharge. What your license sets is concurrency, how many tests run at the same time.

No. Named users are unlimited on every license.

The SpartanX platform, reporting, single sign-on and SAML, and vendor management, with unlimited named users. Nothing core is held behind a usage meter.

Yes. We license large estates and high-concurrency testing. Your license defines both the assets you cover and how many tests run in parallel, so we size it to your program.

Yes. We offer annual and multi-year terms. Talk to us about the structure that fits your budget.

Head to Get started or book a demo. We will scope your assets and return a tailored quote.

Pricing is tailored to your estate.

Tell us the assets you want under test, and we will size a license to your footprint and your cadence. No usage traps, no surprises.