Pricing
Unlock one full audit when you need it, or put a live site on Care for weekly scans, alerts, retests, and a security badge.
BoringSec keeps pay-per-report pricing for one-off audits and adds a clear monitoring path for teams that need recurring coverage.
One-off audits
Use a single report for one domain, or buy credits for launches, client checks, and retests.
Full security report for this scan
This report + 2 future scans
€129.00 per package
Save €18.00 vs single
This report + 9 future scans
€390.00 per package
Save €100.00 vs single
Lowest per-report cost
Monitoring plans
Start with Care for one live site, then move to Pro, Team, or Enterprise as your domains, workflows, and reporting needs grow.
One live site
€24.17/mo billed yearly
Weekly deep scans, lightweight monitoring, alerts, retests, and a live badge.
1
domains
Weekly monitoring
cadence
Included
Solo founder
€65.83/mo billed yearly
Security and code audit credits, MCP, and weekly monitoring across a small portfolio.
5
domains
Weekly monitoring
cadence
Included
Agency or small team
€207.5/mo billed yearly
More domains, seats, daily monitoring, Slack/webhooks, PDF reporting, and compliance mapping.
20
domains
Daily monitoring
cadence
Included
Larger app portfolio
From €9,900/yr
Custom volume, white-label reporting, audit logs, procurement support, and dedicated onboarding.
250
domains
30-minute monitoring
cadence
Included
What you get
Full descriptions for every finding
Step-by-step fix instructions
AI prompts for Cursor / Lovable / Claude / Bolt
Severity context + exploit details
Compliance mapping (GDPR / SOC2 / PCI DSS)
Downloadable PDF + email delivery
Quick-wins prioritization
Framework-specific fix templates
Choose the right path
The product stays simple: free preview, paid report, then recurring monitoring when the risk justifies it.
| Feature | Free | Report | Care | Pro | Team | Enterprise |
|---|---|---|---|---|---|---|
| Free preview | Included | Included | Included | Included | Included | Included |
| Full report unlock | Pay per report | Included | Included | Included | Included | Included |
| AI fix prompts | Sample only | Included | Not included | Included | Included | Included |
| Continuous monitoring | Not included | Not included | Included | Included | Included | Included |
| Alert channels | Not included | Not included | Email, Slack, webhook | Email, Slack, webhook | Custom | |
| Team workflow | Not included | Not included | Solo | Solo | 5 seats | 100 seats |
| Compliance reporting | Not included | Report mapping | Report mapping | Report mapping | SOC 2, GDPR, PCI DSS | SOC 2, GDPR, PCI DSS, HIPAA, ISO 27001 |
Secure payment via Stripe
PDF + email delivery
Instant access
7-day refund on unopened reports
Every scan starts with a free preview: security score, severity counts, list of all scanner categories with issue counts, and all finding names. You only pay when you want the full breakdown with fix instructions.
Start a scanFAQ
Each detailed security report costs €49.00. Multi-report packages cut the per-report cost down to €43.00 (3-pack) or €39.00 (10-pack). Credits are valid for 365 days and can be used on any domain you scan.
A complete security audit: every finding fully described with severity context, exploit details, step-by-step remediation, AI fix prompts (Cursor / Lovable / Claude / Bolt), compliance mapping (GDPR / SOC2 / PCI DSS), and a downloadable PDF emailed to you.
You can scan any domain and see a free preview - score, severity counts, list of scanner categories with issue counts, and all finding names. To unlock the full report with all fixes, purchase a single report or a multi-report package.
Yes. Care is the recurring plan for one live site: weekly deep scans, monitoring, alerts, retests, and a live badge. Pro, Team, and Enterprise add more domains, workflow, and reporting depth.
Intruder is deeper for mature vulnerability management. BoringSec stays lighter: free preview, paid reports, AI fix prompts, Care monitoring, and founder-friendly pricing for AI-built apps and small teams.
Your purchase is an instant digital report. If a scan fails or you're charged by mistake, we refund you in full. If you change your mind, email support@boringsec.com within 7 days for a refund, as long as you haven't unlocked the full report. Once you've unlocked and viewed the findings and fixes, the report has been delivered and used, so it's non-refundable, like any digital content you've already read.
Each fix prompt is tailored to your specific AI coding tool. Lovable users get Lovable-specific instructions, Cursor users get file-path-oriented fixes. Copy, paste, fixed.