Pricing
The free check grades any public domain from the outside. A one-time scan checks one site in depth. Monthly plans keep watching: instead of rescanning everything every day, they rescan when your site changes or a new security advisory affects it.
Free
See what anyone can see about your site.
$0no card needed
One-time scan
A full scan when you need it, with a retest to confirm your fixes.
$19per site, paid once
Starter One site
One site, scanned properly and watched for change.
$29per month
Studio
Your shop, your blog and your app, each watched on its own.
$49per month · 3 sites
Agency
Every client on one deck, kept apart.
$149per month · 10 sites
Enterprise
Many sites, your own sign-in and scan windows that fit your operations.
Customtailored to your sites
Prices exclude applicable taxes. A paid plan never starts on its own: you choose it in your account.
What a plan sets
One exact origin each — scheme, host and port. A subdomain is its own site and is verified on its own.
No plan is priced by how often it scans. Instead of rescanning everything every day, we rescan when something changes or a new advisory appears, plus a full baseline every month.
Retest a finding as soon as you fix it. Short waits and daily limits on retests and manual full scans keep scanning gentle on your site; the app shows when the next one is available.
Every scan shows its estimate before it starts. Reaching a limit stops the scan and labels it partial, never clean.
Questions
One exact origin — scheme, host and port, for example https://www.example.com. A shop subdomain or a staging host is a separate site, verified on its own.
No. Monthly plans run a full baseline once a month and rescan in between only when something changes — a new release, a changed fingerprint or a security advisory that affects your stack. You can also start a scan or a retest yourself.
It reads only what any visitor can see: the certificate, response headers and cookies, public DNS records, the home page and a short fixed list of well-known paths. At most 15 requests, no attack payloads, no sign-in.
It stops at the limit and is labelled partial, never clean. The report shows what was tested and what was not, so you know where to look next.
In US dollars. Monthly plans are billed each month and can be cancelled any time; a one-time scan is paid once per site. No card is asked when your account is opened, and a paid plan starts only when you choose it in your account.
No tool can promise that. A grade covers the checks that ran — untested is not secure. Paid plans show exactly what was tested and what was not.
Trustpect currently works with invited users. Your sign-in link arrives with the invitation.
