Simple by design
Start testing. Keep shipping.
Real assessments of your live website, with room to find your first vulnerability. No card required.
Free
Available now$0 / month
For developers who want proof their private data stays private.
- 100 assessments every month
- Up to 15 minutes per assessment
- Up to 250 requests per assessment
- REST API and MCP access
- Evidence and signed webhook results
Extra capacity
Coming soonPay as you go
When you need more than the monthly allowance, top up with prepaid assessments.
- 100 assessments per credit pack
- Free allowance is used first
- Credits do not expire
- No subscription or automatic renewal
- Failed runs return their credit
Paid top-ups are not open yet. Start with the free plan today.
A few practical details
What counts as an assessment?
One agent run against a verified website, with a time and request budget. You can have one active run at a time. Failed runs do not consume your allowance; canceling a started run does.
Do I need to share my source code?
No. AgentDAST tests your public HTTPS deployment. You prove ownership and plant a synthetic flag in private app data.
Does a run with no findings mean my site is secure?
No. It means the agent did not confirm an exposure within that run. Each result includes the available evidence and outcome.