Free
$0forever
Try VeilScan on your domain — no credit card required.
- 1 domain
- 1 lifetime scan
- Basic external security scan
- Medium & Low findings
- Critical & High findings
- PDF report
- Attack paths
- Slack alerts
Pricing
Simple. Transparent.
Simple. Transparent.
Proof included.
Every plan includes proof-backed findings and 5-framework compliance mapping. Core and Pro unlock full attack-path visibility and recurring monitoring depth. No per-scan fees.
Pricing plans
Starter
$49/mo
For small teams getting started with external security.
- 1 domain monitored
- 1 manual scan / month
- Proof-backed findings
- 5-framework compliance mapping
- PDF report + portal access
- Slack alerts
- Attack path chains
- Delta reports
Core
$149/mo
For security-focused engineering teams who need depth.
- Up to 5 domains
- 5 manual scans / month
- Weekly re-scan
- Proof-backed findings
- 5-framework compliance mapping
- PDF report + portal access
- Slack alerts on criticals
- Attack path chains
- Delta reports
Pro
$299/mo
For growing SaaS teams monitoring multiple public assets.
- Up to 20 domains
- 25 manual scans / month
- Daily re-scan
- Proof-backed findings
- 5-framework compliance mapping
- PDF report + portal access
- Slack alerts + Attack paths
- Delta reports
- Compliance export (CSV/JSON)
All plans require a signed Rules of Engagement document · Manual onboarding for first 20 customers
Full comparison
Everything side by side.
| Feature | Free | Starter | Core | Pro |
|---|---|---|---|---|
| Domains monitored | 1 | 1 | 5 | 20 |
| Scans included | 1 lifetime | 1 / month | 5 / month | 25 / month |
| Automatic schedule | — | Monthly | Weekly | Daily |
| External asset discovery | Basic | ✓ | ✓ | ✓ |
| SSL/TLS checks | ✓ | ✓ | ✓ | ✓ |
| Email security (SPF/DMARC/DKIM) | ✓ | ✓ | ✓ | ✓ |
| Medium & Low findings | ✓ | ✓ | ✓ | ✓ |
| Critical & High findings | ✕ | ✓ | ✓ | ✓ |
| AI narrative & PDF report | — | ✓ | ✓ | ✓ |
| 5-framework compliance mapping | ✓ | ✓ | ✓ | ✓ |
| Attack path chains | — | — | ✓ | ✓ |
| Slack critical alerts | — | — | ✓ | ✓ |
| Delta reports (new/fixed/overdue) | — | — | ✓ | ✓ |
| Compliance export (CSV/JSON) | — | — | — | ✓ |
| Get started free | Get started | Start with Core | Start with Pro |
Common questions
Everything you need
Everything you need
to know.
No. VeilScan is purely external — it only scans what is visible from the public internet. No agents, no credentials, no internal network access required.
A signed document confirming you have authorisation to scan the specified domains. Required before any scan runs. We provide a template and handle onboarding manually.
Critical and High findings must include a captured request and response as evidence before they are reported at that severity. Findings without the required evidence are automatically downgraded. This reduces false positives but cannot eliminate them, so tell us if a finding looks wrong and we will review it.
Scan results, reports and findings are stored on infrastructure operated by VeilScan. Some finding details are sent to third-party AI model providers to help write reports, and scan targets are looked up in public internet data sources. These providers may process data outside the UK and the EU. See the Privacy Policy for the full list.
Yes. On all plans you can trigger an on-demand manual scan from your portal. Manual scans are separate from your automatic per-domain schedule.
VeilScan maps every finding to ISO 27001, SOC 2, GDPR (Art. 32), PCI DSS, and Cyber Essentials. Each finding shows the specific clause or control it relates to.
Yes. All paid plans are month-to-month. Cancel any time from your portal settings. There are no long-term contracts or cancellation fees.
Your first scan.
In under two hours.
Add your domain, verify ownership, and let VeilScan do the rest. No agents, no credentials, no internal access required.
★ No hidden fees★ Cancel any time