Pricing
Know what's exposed. Fix it fast.
800 security checks in the full suite. Free shows what's broken. Paid gives you the exact fix, ready to paste, and keeps watching.
3,281+
Scans run
22,489
Vulnerabilities found
800
Security checks
Free

Check any site in a couple of minutes
Forever
- 1 domain, checked on demand
- Full security scan (800 check suite)
- Score, grade & severity breakdown
- All finding titles + severity
- OWASP Top 10 checks
- 1 lifetime deep scan (verified domain)
Solo
FOR SOLO FOUNDERS
1 monitored domain, unlimited re-scans
Billed monthly
- Re-scan to verify your fix + before/after diff
- Full finding details + AI fix prompts
- Weekly & monthly monitoring + alerts
- Unlimited deep scans + CVE alerts
- PDF export, badge, GitHub, scan history
Studio

5 monitored domains, unlimited re-scans
Billed monthly
- Everything in Solo
- Cover client sites and side projects
- Monitoring up to every 3 days
- Priority support
Scale

15 monitored domains, unlimited re-scans
Billed monthly
- Everything in Studio
- Daily monitoring
- Early access to new checks as they roll out
Prices are in USD. Applicable taxes (such as VAT) are calculated at checkout by Freemius. Fair use: unlimited re-scans are for verifying and monitoring your own domains, not bulk scanning.
Managing more than 15 client domains? Email us - an Agency plan with white-label reports is on the way, and early access is open.
Scan once to find it. Re-scan to prove it is fixed.
Same scan. Different level of detail.
Missing Content Security Policy (CSP)
Severity: Critical
Upgrade to verify your fix worked
Missing Content Security Policy (CSP)
Severity: Critical
Your site has no CSP header, allowing attackers to inject malicious scripts via XSS. This can lead to session hijacking, data theft, and defacement.
// AI fix prompt - copy to Cursor / Claude
Add Content-Security-Policy header:
default-src 'self'; script-src 'self';
Compare plans
| Feature | Free | Solo | Studio | Scale |
|---|---|---|---|---|
| Coverage | ||||
| Monitored domains | 1 | 5 | 15 | |
| Fresh scans | 2 / month | Unlimited | Unlimited | Unlimited |
| Re-scan the same domain | Once a month | Anytime | Anytime | Anytime |
| Monitoring & alerts | Weekly | Every 3 days | Daily | |
| Deep scan - active checks (verified domain) | 1 lifetime | Unlimited | Unlimited | Unlimited |
| Always-fresh scans | Cached up to 24h | |||
| Find & fix | ||||
| Security scan | 223 checks | 800 check full suite | 800 check full suite | 800 check full suite |
| Finding titles + severity | All severities | All + full fixes | All + full fixes | All + full fixes |
| Score breakdown by category | All 7 categories | All 7 categories | All 7 categories | All 7 categories |
| Verify a fix (before/after diff) | ||||
| AI fix prompts | All findings | All findings | All findings | |
| Plain-English fix suggestions | ||||
| Reports & integrations | ||||
| PDF report export | ||||
| Scan history & score trend | ||||
| Security badge for your site | ||||
| GitHub integration | ||||
| Regulatory readiness (optional, per domain) | ||||
| Jurisdiction-Aware Compliance (opt-in) | ||||
| Israeli Privacy Readiness - Tikun 13 score + coverage | ||||
| Signal-by-signal evidence & source links | ||||
| Readiness appendix in PDF export | ||||
| Support | ||||
| Priority support | ||||
| Early access to new checks as they roll out | ||||
| Advanced Security Assessment | Learn more | Learn more | Learn more | Learn more |
FAQ
What is a monitored domain?+
A domain you actively protect with UNPWNED: we scan it continuously on your schedule, alert you when something changes, and let you re-scan it anytime to verify fixes. Solo covers 1 domain, Studio covers 5, Scale covers 15. Subdomains of the same site count as one domain.
Are re-scans really unlimited?+
Yes, within fair use. The whole point of fixing something is re-scanning to prove it worked, so paid plans never meter the fix-verify loop on your monitored domains. Fair use means protecting your own sites, not bulk-scanning the internet.
Is re-scanning to check my fix free?+
Free re-scans the same domain once a month, so you can watch your score over time. Instantly re-scanning right after a fix, plus the before/after diff that proves the issue is gone, is a paid feature.
What does a scan check?+
Every scan covers the outside-in surface across OWASP Top 10, headers, SSL/TLS, exposed secrets, open ports, and more, drawn from a suite of 800 checks. Deep Scan (on verified domains) unlocks the active-probing set: path traversal / LFI, CVE fingerprinting, cloaking detection, ghost-page sampling, and deep CORS/method testing. Paid reports that pass Green Light can activate an UNPWNED VERIFIED badge.
Will UNPWNED scans trigger my firewall or WAF?+
Sometimes. A confirmed WAF challenge can interrupt checks; that means scanner access was limited, not that every application control is secure. Anonymous scanner addresses must never receive a broad firewall Allow rule. Verified owner scans can use UNPWNED's published dedicated scanner IP; allow only that IP for the exact verified domain through the guided access flow. If you are behind Cloudflare, follow the Cloudflare scan guide for the safe access flow.
Why did my Free scan return cached results?+
To keep the Free tier fast and reduce repeated traffic to target sites, Free scans may reuse a healthy cached result if the same domain was scanned in the last 24 hours. You see severity counts and all finding titles, plus score and grade when coverage supports a reliable result. For always-fresh scans, verify your domain ownership (free) or upgrade. Paid scans and verified-domain scans always run live.
What if a paid plan isn't worth it for me?+
You can cancel anytime with one click, no questions asked. The Free plan is always there if you only need a basic check.
Why not just use free security tools?+
Single-purpose tools check one thing at a time (SSL, headers, DNS). UNPWNED runs 223 checks free in one scan, and 800 on the full suite, finds the issues, gives you AI-generated fix instructions you can copy-paste into your editor, and then proves the fix worked. One scan replaces 10+ separate tools.
Can I change plans?+
Yes. You can move between Solo, Studio, and Scale at any time. Changes take effect immediately and are prorated by our payment provider.
What payment methods do you accept?+
We accept all major credit and debit cards via Freemius. All payments are processed securely - we never store your card details.
See what needs attention before it becomes an incident.
Run your first scan in a couple of minutes. No credit card required.
3,281+ scans already run - 22,489 vulnerabilities found
