ImmuniWeb® AI Platform Pricing

Bridging AI and Human Intelligence

The award-winning ImmuniWeb® AI Platform helps customers from over 50 countries to test,
secure and protect their applications, cloud and infrastructure, to prevent data breaches,
to reduce supply chain attacks and to maintain compliance requirements.

ImmuniWeb® Discovery

1 Enter Company Name

Just enter a company name to run
open-sourced intelligence scan
of its entire attack surface

2 See What Hackers See

Explore on-premises systems and
cloud resources where the data
is stored or processed

3 See What Hackers Do

Detect data breaches, compromised
accounts or systems, stolen data,
phishing and brand misuse

ImmuniWeb® Discovery	Ultimate	Corporate Pro	Corporate	Express Pro
Access to Security Analysts 24/7 access to our security analysts for misconfiguration and vulnerability remediation questions.
Domain & Subdomains Discovery Comprehensive discovery of domain names and subdomains belonging to or operated by the company.
Web Applications & API Discovery Comprehensive discovery of on-premise and cloud-hosted websites, web applications, APIs and web services belonging to or operated by the company.
Mobile Applications & API Discovery Comprehensive discovery of publicly accessible (e.g. via website or public app stores) mobile applications of the company with full list of mobile endpoints (e.g. APIs and web services).
Security & Compliance Monitoring Comprehensive detection of vulnerable or outdated web and network software, exposed admin interfaces or consoles, insecure server configurations, weak encryption, and PCI DSS, NIST and GDPR compliance failures of all external IT assets belonging to or operated by the company.
Multicloud Resources Discovery Comprehensive discovery of exposed or unprotected cloud storage, services, APIs and instances located in over 50 public cloud service providers including AWS, Azure and GCP that belong to or are operated by the company.
Network Services Discovery Comprehensive discovery of all network services, appliances and IoT devices accessible from the Internet that belong to or are operated by the company.
Cyber Threat Intelligence Comprehensive monitoring of Indicators of Compromise (IoC), threat intelligence feeds, discussions on hacking forums, underground marketplaces, Telegram and IRC channels mentioning the company, its executives or employees, data or IT assets.
Repositories Monitoring Comprehensive monitoring of code, system and container repositories to detect leaked or exposed source code, system images and hardcoded secrets (e.g. API keys) belonging to the company.
Dark Web Monitoring Comprehensive monitoring of various Dark Web resources for the company’s stolen credentials or documents, compromised systems or databases for sale, mentions of backdoored devices or servers belonging to or operated by the company.
Phishing Monitoring Comprehensive monitoring of ongoing phishing and online fraud campaigns targeting the company’s executives, employees or customers.
Brand Monitoring Comprehensive monitoring of fake accounts in social networks, domain cybersquatting and typosquatting that target the company’s brand or identity.
Access to Dark Web Analysts 24/7 access to our threat analysts to review and discuss any newly discovered intrusions, data breaches and other security incidents.
Updates Frequency of new incidents, items and asset discovery.	24/7	Every Day	Every Week	Every 2 Weeks
Annual Subscription	$3995 per month	$1995 per month	$995 per month	$499 per month
Monthly Subscription		$4995 per month

Packages per Year:

Volume Discount:

Packages per Year: 25

Volume Discount: 10%

Buy Now

Product Page

ImmuniWeb® On-Demand

1 Configure Your Test

Enter URL(s) of your web application,
indicate any special testing, scoping
or reporting requirements

2 Schedule Your Test

Select your package, schedule the
penetration testing dates and
report delivery date

3 Get Your Report

Browse the interactive dashboard,
export data in PDF and schedule
patch verification scan

ImmuniWeb® On-Demand	Corporate Pro Designed for one web application of large size and complexity, located on multiple subdomains or having several user roles.	Corporate Designed for one web application of medium size and complexity, located on several subdomains or having a couple of user roles.	Express Pro Designed for one web application of small size and complexity, located on one or two subdomains and having one user role.	Express Designed for one web application of very small size and complexity, located on one domain and having one simple user role.
AI-Automated Penetration Testing Our award-winning Deep Learning AI technology accelerates and intelligently automates over 10,000 checks of your web application security, which usually require human labor and cannot be performed by traditional vulnerability scanners due to complexity.	120 hours	72 hours	24 hours	12 hours
Manual Testing of Business Logic Our CREST-accredited security experts conduct advanced security testing of your web application’s business logic, perform chained exploitation of sophisticated vulnerabilities, and run other security and privacy checks that require human intelligence due to high complexity.	3+ experts	2+ experts	1+ experts	1 expert
Zero False Positive SLA Our Terms of Services provide contractual money-back guarantee for a single false positive in your penetration testing report.
Rapid Delivery SLA Our Terms of Services provide contractual money-back guarantee for delayed delivery of your penetration testing report.
WAF Virtual Patching Our technology alliances with the leading WAF vendors provide ready-to-use WAF rulesets with your penetration testing report to automatically mitigate the detected vulnerabilities.
DevSecOps & CI/CD Integrations Our technology alliances with the leading SIEM and DevOps vendors provide one-click vulnerability data export into your vulnerability management systems, bug trackers, as well as integration of penetration testing into your CI/CD pipeline.
24/7 Access to our Security Analysts Our security analysts are at your disposal during and after the penetration test may you need any advice or additional information on remediation or implementation of security best practices.
Unlimited Patch Verification Scans Unlimited patch verification scans are available during 100 days after the delivery of your penetration testing report to verify that all of the detected vulnerabilities have been properly fixed by your software developers.
Privacy Assessment Our security experts examine widespread privacy issues and compliance failures in your web application.
Dark Web Reconnaissance Our security experts investigate your organization’s exposure on Dark Web, such as stolen credentials, and leverage this data during the penetration test.
Red Teaming Exercise On request, our security experts may perform Red Teaming exercise tailored to your threat landscape, emulating tactics, techniques and procedures (TTP) of a specific cyber threat actor.
Price	$4995 —	$2995 —	$995 —	$499 —

Packages per Year:

Volume Discount:

Packages per Year: 25

Volume Discount: 10%

Buy Now

Product Page

ImmuniWeb® MobileSuite

1 Configure Your Test

Upload your mobile application,
indicate any special testing or
reporting requirements

2 Schedule Your Test

Select your package, schedule the
penetration testing dates and
report delivery date

3 Get Your Report

Browse the interactive dashboard,
export data in PDF and schedule
patch verification scan

ImmuniWeb® MobileSuite	Corporate Pro Designed for mobile application of large size and complexity, with multiple endpoints (e.g. APIs or web services) or several user roles.	Corporate Designed for mobile application of medium size and complexity, with several endpoints (e.g. APIs or web services) or a couple of user roles.	Express Pro Designed for mobile application of small size and complexity, with one or two endpoints (e.g. APIs or web services) and one user role.	Express Designed for mobile application of very small size and complexity, with one main endpoint (e.g. API or web service) and one simple user role.
AI-Automated Penetration Testing Our award-winning Deep Learning AI technology accelerates and intelligently automates over 7,500 checks of your mobile application security, which usually require human labor and cannot be performed by traditional vulnerability scanners due to complexity.	120 hours	120 hours	72 hours	24 hours
Manual Testing of Business Logic Our CREST-accredited security experts conduct advanced security testing of your mobile application’s business logic, perform reverse engineering and exploitation of your mobile application backend (e.g. APIs or web services), and run other security and privacy checks that require human intelligence due to high complexity.	4+ experts	3+ experts	2+ experts	1 expert
Zero False Positive SLA Our Terms of Services provide contractual money-back guarantee for a single false positive in your penetration testing report.
Rapid Delivery SLA Our Terms of Services provide contractual money-back guarantee for delayed delivery of your penetration testing report.
WAF Virtual Patching Our technology alliances with the leading WAF vendors provide ready-to-use WAF rulesets with your penetration testing report to automatically mitigate the vulnerabilities found in the backend (e.g. APIs or web services) of your mobile application.
DevSecOps & CI/CD Integrations Our technology alliances with the leading SIEM and DevOps vendors provide one-click vulnerability data export into your vulnerability management systems, bug trackers, as well as integration of penetration testing into your CI/CD pipeline.
24/7 Access to our Security Analysts Our security analysts are at your disposal during and after the penetration test may you need any advice or additional information on remediation or implementation of security best practices.
Unlimited Patch Verification Scans Unlimited patch verification scans are available during 100 days after the delivery of your penetration testing report to verify that all of the detected vulnerabilities have been properly fixed by your software developers.
Privacy Assessment Our security experts examine widespread privacy issues and compliance failures in your mobile application.
Cross-Platform Apps Testing Corporate package is required for complex cross-platform applications (e.g. Xamarin Framework) as they usually require significantly more resources and human time for comprehensive testing.
Root or Jailbreak Detection Bypass Corporate Pro package is required if your mobile application has a protection against running on rooted or jailbroken devices.
Emulator Detection Bypass Corporate Pro package is required if your mobile application prevents running on an emulator or requires to be tested on a real device.
Certificate Pinning Bypass Corporate Pro package is required if your mobile application uses SSL certificate pinning technology.
Code Obfuscation Bypass Corporate Pro package is required if your mobile application's code is obfuscated to prevent reverse-engineering.
Red Teaming Exercise On request, our security experts may perform Red Teaming exercise tailored to your threat landscape, emulating tactics, techniques and procedures (TTP) of a specific cyber threat actor.
Price	$9495 —	$7495 —	$3495 —	$1495 —

Packages per Year:

Volume Discount:

Packages per Year: 25

Volume Discount: 10%

Buy Now

Product Page

ImmuniWeb® Continuous

1 Configure Your Test

Enter the URL(s) of your application,
indicate any special testing, scoping
or reporting requirements

2 Select the Best Package

Pick up a package or get a free
consultation from our security
analysts to select one

3 Schedule and Start

Select subscription starting date,
add users, customize alerts
and you are done!

ImmuniWeb® Continuous	Corporate Pro Designed for one web application of large size and complexity, located on multiple subdomains or having several user roles.	Corporate Designed for one web application of medium size and complexity, located on several subdomains or having a couple of user roles.	Express Pro Designed for one web application of small size and complexity, located on one or two subdomains and having one user role.	Express Designed for one web application of very small size and complexity, located on one domain and having one simple user role.
AI-Automated Penetration Testing Our award-winning Deep Learning AI technology accelerates and intelligently automates over 10,000 checks of your web application security, which usually require human labor and cannot be performed by traditional vulnerability scanners due to complexity.	24/7	24/7	24/7	24/7
Manual Testing of Business Logic Our CREST-accredited security experts conduct advanced security testing of your web application’s business logic, perform chained exploitation of sophisticated vulnerabilities, and run other security and privacy checks that require human intelligence due to high complexity.	3+ experts	2+ experts	1+ experts	1 expert
Zero False Positive SLA Our Terms of Services provide contractual money-back guarantee for a single false positive in your penetration testing report.
Rapid Delivery SLA Our Terms of Services provide contractual money-back guarantee for delayed delivery of your penetration testing report.
WAF Virtual Patching Our technology alliances with the leading WAF vendors provide ready-to-use WAF rulesets with your penetration testing report to automatically mitigate the detected vulnerabilities.
DevSecOps & CI/CD Integrations Our technology alliances with the leading SIEM and DevOps vendors provide one-click vulnerability data export into your vulnerability management systems, bug trackers, as well as integration of penetration testing into your CI/CD pipeline.
24/7 Access to our Security Analysts Our security analysts are at your disposal during and after the penetration test may you need any advice or additional information on remediation or implementation of security best practices.
Unlimited Patch Verification Scans Unlimited patch verification scans are available during 100 days after the delivery of your penetration testing report to verify that all of the detected vulnerabilities have been properly fixed by your software developers.
Privacy Assessment Our security experts examine widespread privacy issues and compliance failures in your web application.
Dark Web Reconnaissance Our security experts investigate your organization’s exposure on Dark Web, such as stolen credentials, and leverage this data during the penetration test.
Red Teaming Exercise On request, our security experts may perform Red Teaming exercise tailored to your threat landscape, emulating tactics, techniques and procedures (TTP) of a specific cyber threat actor.
Annual Subscription	$5495 per month	$3495 per month	$1495 per month	$995 per month
Monthly Subscription	$10995 per month	$6995 per month

Packages per Year:

Volume Discount:

Packages per Year: 25

Volume Discount: 10%

Buy Now

Product Page

Trusted by 1,000+ Global Customers

ImmuniWeb is an efficient and very easy-to-use solution that combines automatic and human tests. The results are complete, straightforward and easy to understand. It’s an essential tool for the development of the new digital activities

Didier Ramella
CISO

ImmuniWeb is the best and simplest way to secure your business online. It's really fantastic experience to get report with zero false positive with detailed actions how to resolve problems and remove vulnerabilities. I think ImmuniWeb is definitely the best alternative to pen testers. As well as a way to save on staff and other costs. I am glad that I can get it all without any hidden costs and without complicated licensing schemes

Nika Vachridze
Senior Information Security Officer

We believe ImmuniWeb platform would definitely address the common weaknesses seen in manual assessments. The AI-assisted platform not only automates the assessments, but also, executes them in a continuous, consistent and reliable fashion. Admittedly, the platform would definitely add quick wins and great ROI to its customers on their investment.

Abuhaneefa Fayaz
Information Security Officer

ImmuniWeb provides accurate assessment on the security posture of our cloud-based applications. The report provided is concise and easy to read with sound advisories on the necessary steps to fix the issues. What impressed me most was that no false-positive was listed and the vulnerabilities are real. ImmuniWeb certainly gives us the right level of assurance that our cloud-based applications are safe and "good-to-go" before we deploy them out to production

Lee Chye Seng
Director, Learning Systems and Applications

ImmuniWeb is an invaluable tool for iPresent with both automated and manual penetration testing. The fantastic manual testing has found even the most hidden and complicated bugs in our security and ImmuniWeb has delivered first class knowledge. The self-service interface also gives us great control to schedule and monitor tests when we need them

Neil Bostrom
Chief Technical Officer

ImmuniWeb is a great innovative service that brings unbeatable ROI. It is undoubtedly the best way to quickly and easily guarantee your customers that their data is safe with you - and yours too by the way! Efficient and effective!

Jean-Michel Beylard-Ozeroff
Head of IT

ImmuniWeb® AI Platform Use Cases

The ImmuniWeb® AI Platform helps enterprise customers from over 50 countries to test, secure and
protect their applications, cloud and infrastructure, reduce supply chain attacks,
prevent data breaches and maintain compliance requirements.