Pay for domains, not seats

When you register a domain, your plan gives you a quota of monthly full scans (e.g. 3 or 4 full rescans per domain every month). This lets you scan initially, make code updates, and re-scan periodically to monitor your security posture. The monthly count resets on the 1st of each month. Additionally, you get unlimited 1-click "Verify Fix" re-tests to check individual patched vulnerabilities without burning your scan quota.

One apex domain (e.g. example.com) including its subdomains discovered during the scan. If you have shop.example.com on a completely different server, that counts as a second domain.

Yes — for every scan, free or paid. You must own the domain or hold explicit written authorisation from the owner before scanning. This applies to all scan types. WebScanify is for authorised security testing only.

Yes. You can purchase additional domain packages at any time. The new slots will be instantly credited to your account limit.

Our AI Security Advisor does two things. First, it actively leads the scan - at each checkpoint it analyzes live findings and decides which paths to probe deeper, which attack chains are worth investigating, and which extra checks to run. Second, after the scan it writes a plain-English report explaining what every finding means for your specific site, how serious it really is, and exactly how to fix it. It also produces an executive summary you can share with a client or management without needing a security background.

Yes. WebScanify is an automated scanner — fast, repeatable, and affordable. It finds the vast majority of common vulnerabilities. A human penetration test goes deeper into business logic and custom attack scenarios but costs 10–100x more. Think of WebScanify as the layer you run continuously to eliminate the low-hanging fruit so a pentest budget goes further.