Security testing, on your terms.

The workspace and existing results remain available to read, but write actions require a paid plan when the evaluation ends. Each business domain receives one shared evaluation lasting up to 14 calendar days from its first account creation, including one authorized target and one scan, with no card or automatic charge.

You can request plan changes through billing. The effective date and any billing adjustment are shown before you confirm the change.

We accept all major credit cards and debit cards. All payments are processed securely through Stripe.

Contact support with the relevant invoice or payment details. We review billing errors and correction requests individually and explain the available resolution before making a change.

Yes. Targets can be deleted if they have never been scanned or have not been scanned in the last 6 months. Detailed findings and tool output follow the published 90-day service retention period; exported PDF and HTML reports are retained for up to 365 days.

Yes. When you add a target, we verify that the domain is reachable via DNS and HTTP. This prevents typos and ensures the target is valid before using up a plan slot.

Signature DAST remains useful for broad CVE and configuration coverage. Agent Breach adds response-aware planning, authenticated application testing, explicit confirmation states, source evidence, CI/CD checks, and fix retests in one workspace.

Periodic pentests and PTaaS provide scoped human assessments. Agent Breach supports repeatable validation between them, with authenticated testing, PR checks, evidence records, reports, and fix retests.

Paid plans include PDF templates for executives (AI Explained, Executive Report), developers, and compliance standards (OWASP WSTG/ASVS, NIST 800-115 & CSF 2.0, CREST, PCI-DSS ASV-style, CIS Controls), plus JSON/CSV exports. Team and higher include full-matrix framework mapping JSON (SOC 2, PCI-DSS, HIPAA, ISO 27001, MITRE ATT&CK, CIS, NIST CSF 2.0, OWASP ASVS) with applicability by app type, and Evidence Pack ZIP.

No. ASV-style templates document vulnerability findings for your audit package. They do not replace a PCI ASV scan, QSA attestation, or formal PCI compliance certification.

Aikido offers a broad security platform and an AI pentesting product. Compare the scope you need, authenticated coverage, recorded evidence, report contents, retest terms, and total price. With Agent Breach, you can inspect a lab evidence sample and product simulation before choosing a web/API plan; Code Security is priced independently.