Pricing
Transparent pricing. No sales maze.
Transparent pricing. No sales maze. Start at the published price. Enterprise deployments can be customized to capacity and requirements.
Founding customer program
Pro normally $79/mo. Founding price locked at $9/mo.
founder price
$9/mo
Locked for the first 100 customers
Free
$0
For exploring Nyxeara.
- Basic DAST engine
- Core vulnerability checks
- Limited security tooling
- Basic reconnaissance
- Basic investigations (2)
- Basic evidence & reports
- + 1 more
Pro
popular$79/mo
foundinglocked
$9/mo
For professional security research.
- Full DAST engine — 60+ check families
- Full security tool ecosystem (61 registered tools)
- Advanced reconnaissance & discovery
- Investigations + knowledge graph
- Evidence & provenance tracking
- Correlation engine + conflict detection
- + 7 more
Business
popular$249/mo
For security teams.
- Everything in Pro
- Team workspaces (5 members)
- RBAC + collaboration
- Shared investigations & assets
- Asset management (1,000 assets)
- 30 pre-built playbooks
- + 8 more
Professional
enchanted$599/mo
For advanced security operations.
- Everything in Business
- High-volume DAST (2,000 scans/mo)
- Large asset inventories (10,000)
- Advanced Sentinel — active defense
- Deception + honeytokens
- Incident operations workflow
- + 9 more
Enterprise
Custom
For organizations operating security at scale.
- Everything in Professional
- Custom capacity — scans, workers, storage
- SSO / SAML / SCIM
- Advanced RBAC + organization policies
- Custom integrations & private extensions
- Dedicated technical contact
- + 6 more
Payment via Gumroad (card) and NOWPayments (crypto).
Feature comparison
The highlighted tiers are where each capability is most valuable.
| Capability | Free | Pro | Business | Professional | Enterprise |
|---|---|---|---|---|---|
| DAST Engine | |||||
| Basic DAST | ✓ | ✓ | ✓ | ✓ | ✓ |
| Full DAST (60+ check families) | — | ✓ | ✓ | ✓ | ✓ |
| Injection (SQLi, NoSQL, LDAP, XPath) | Limited | ✓ | ✓ | ✓ | ✓ |
| XSS (reflected, stored, DOM) | Limited | ✓ | ✓ | ✓ | ✓ |
| SSRF + deep SSRF chains | — | ✓ | ✓ | ✓ | ✓ |
| Request smuggling | — | ✓ | ✓ | ✓ | ✓ |
| Race conditions | — | ✓ | ✓ | ✓ | ✓ |
| Authentication testing | Limited | ✓ | ✓ | ✓ | ✓ |
| JWT / OAuth / WebAuthn | — | ✓ | ✓ | ✓ | ✓ |
| CSP / CORS / TLS analysis | Basic | ✓ | ✓ | ✓ | ✓ |
| GraphQL / WebSocket / SSE | — | ✓ | ✓ | ✓ | ✓ |
| Cloud exposure + bucket discovery | — | ✓ | ✓ | ✓ | ✓ |
| Business logic + IDOR | — | ✓ | ✓ | ✓ | ✓ |
| Scans & Limits | |||||
| DAST scans / month | 5 | 100 | 500 | 2,000 | Custom |
| Deep scans / month | 0 | 10 | 50 | 250 | Custom |
| Concurrent scans | 1 | 3 | 8 | 20 | Custom |
| Max crawl pages | 25 | 150 | 500 | 2,000 | Custom |
| Scan retention | 7 days | 90 days | 1 year | 2 years | Custom |
| Security Tools | |||||
| 48 integrated tools | Limited | ✓ | ✓ | ✓ | ✓ |
| Nuclei + CVE matching | Limited | ✓ | ✓ | ✓ | ✓ |
| SQLMap / Masscan / Amass | — | ✓ | ✓ | ✓ | ✓ |
| SecurityTrails / OSINT | — | ✓ | ✓ | ✓ | ✓ |
| Strix AI agent | — | ✓ | ✓ | ✓ | ✓ |
| Advanced tool chaining | — | ✓ | ✓ | ✓ | ✓ |
| Investigations | |||||
| Investigations | 2 | 20 | 100 | Unlimited | Custom |
| Entity resolution | Basic | ✓ | ✓ | ✓ | ✓ |
| Knowledge graph | — | ✓ | ✓ | ✓ | ✓ |
| Correlation engine | — | ✓ | ✓ | ✓ | ✓ |
| Finding lifecycle + triage | Basic | ✓ | ✓ | ✓ | ✓ |
| Investigation sharing | — | — | ✓ | ✓ | ✓ |
| Real-time presence + tasks | — | — | ✓ | ✓ | ✓ |
| Evidence & Provenance | |||||
| Evidence linking | Basic | ✓ | ✓ | ✓ | ✓ |
| Evidence lineage | — | ✓ | ✓ | ✓ | ✓ |
| SHA-256 evidence integrity | — | ✓ | ✓ | ✓ | ✓ |
| Evidence export | — | ✓ | ✓ | ✓ | ✓ |
| Configurable retention | — | — | ✓ | ✓ | ✓ |
| AI & Intelligence | |||||
| AI finding analysis | Limited | ✓ | ✓ | ✓ | ✓ |
| Attack-chain suggestions | — | ✓ | ✓ | ✓ | ✓ |
| Remediation plans | Limited | ✓ | ✓ | ✓ | ✓ |
| Action proposals | — | ✓ | ✓ | ✓ | ✓ |
| AI governance policies | — | — | ✓ | ✓ | ✓ |
| Custom AI providers | — | — | — | ✓ | ✓ |
| Workflows & Playbooks | |||||
| Workflow builder | — | ✓ | ✓ | ✓ | ✓ |
| Pre-built playbooks | 2 | 10 | 20 | 30 | 30+ |
| Custom playbooks | — | 2 | 10 | Unlimited | Unlimited |
| Scheduled workflows | — | — | ✓ | ✓ | ✓ |
| Approval gates | — | ✓ | ✓ | ✓ | ✓ |
| Teams & Collaboration | |||||
| Users | 1 | 1 | 5 | 20 | Custom |
| Team workspaces | — | — | ✓ | ✓ | ✓ |
| RBAC | Basic | Basic | Advanced | Advanced | Custom |
| SSO / SAML / SCIM | — | — | — | — | ✓ |
| Audit logs | 7 days | 90 days | 1 year | 2 years | Custom |
| API & Integrations | |||||
| API access | Limited | ✓ | ✓ | ✓ | ✓ |
| CLI | — | ✓ | ✓ | ✓ | ✓ |
| Webhooks | — | 2 | 10 | 50 | Custom |
| Custom integrations | — | — | — | ✓ | ✓ |
| Sentinel (Active Defense) | |||||
| Sentinel visibility | — | Read-only | ✓ | ✓ | ✓ |
| Decoys + honeytokens | — | — | Limited | ✓ | Custom |
| Incident workflow | — | — | Limited | ✓ | ✓ |
| AI correlation + TTP KB | — | — | Limited | ✓ | Custom |
| Auto-hardening | — | — | — | Approval-gated | Custom |
| Reporting | |||||
| Basic reports | ✓ | ✓ | ✓ | ✓ | ✓ |
| PDF / JSON reports | — | ✓ | ✓ | ✓ | ✓ |
| Executive summaries | — | ✓ | ✓ | ✓ | ✓ |
| Report templates | Basic | Standard | 16 | 16+ | Custom |
| Scheduled reports | — | — | ✓ | ✓ | ✓ |
| Support | |||||
| Community support | ✓ | ✓ | ✓ | ✓ | ✓ |
| Email support | — | ✓ | ✓ | ✓ | ✓ |
| Priority support | — | — | ✓ | ✓ | ✓ |
| Dedicated technical contact | — | — | — | — | ✓ |
| SLA | — | — | Optional | Optional | Custom |