Plans that scale from your first pentest to pipeline-native testing.
Start free with a 7-day full-access trial — up to 5 tests a day, with complete findings, evidence, and reports. Move up to Standard, Pro, or Enterprise whenever you're ready. Signup is self-serve — verify your work-email domain and you're testing.
Free
See where you stand. No card required.
full Pro access — no card
Run real, full-capability tests against your own assets for 7 days — complete finding details, evidence, and exportable reports, exactly like Pro. After the trial your workspace goes read-only: every prior result stays accessible, you just upgrade to run new tests.
- ✓ Full Pro capabilities for 7 days
- ✓ Complete finding details, evidence & exportable reports
- ✓ Up to 5 tests per 24 hours
- ✓ Read-only after day 7 — prior test data stays accessible
- ✓ Verified work-email domain required at signup
- ✓ Single user, single organization
Standard
For internal security teams running pentests on their own org.
Everything in Free, plus the full finding details, evidence chain, and exportable PDF / CSV / AttackForge reports. One organization, up to 10 tests a month within your scope.
- ✓ 10 tests per month within scope
- ✓ Full finding details with evidence chain
- ✓ PDF, CSV, and AttackForge report generation
- ✓ External and web-application testing
- ✓ Approval gates and full audit log
- ✓ Credential capture (encrypted at rest)
Pro
For MSSPs, MSPs, and pentesters managing multiple clients.
per additional organization — bulk discounts available
Everything in Standard, plus unlimited scanning, internal-network testing, and multi-organization management — the same PDF, CSV, and AttackForge reports for every organization. Your first organization is included; add more at the rate below, with bulk discounts as you grow.
- ✓ Everything in Standard
- ✓ Unlimited scanning — no test caps
- ✓ Internal-network testing via WireGuard agent
- ✓ Multi-organization management — first organization included
- ✓ Per-engagement network access + evidence isolation
- ✓ Customer-branded reports — your client's logo on every PDF
- ✓ Priority support
Enterprise
For teams that want pipeline-native testing and volume pricing.
Everything in Pro, plus CI/CD security scanning built in — DAST, SAST, and SCA on every deploy — and volume pricing sized to your program. Tell us what you need and we'll scope it.
- ✓ Everything in Pro
- ✓ CI/CD security scanning included — DAST, SAST & SCA on every deploy
- ✓ Unlimited scanning across all organizations
- ✓ Internal-network testing via WireGuard agent
- ✓ Volume pricing — sized to your program
- ✓ On-prem deployment available for strict data residency
- ✓ Priority support & guided onboarding
Pro includes your first organization; additional organizations are $199.99/mo each, with bulk discounts as you scale.
Sanity Solutions
Sanity Solutions is our Gold reseller partner. Buying any paid tier through them — Standard, Pro, or Enterprise — gets you gold-tier discount pricing, along with their own onboarding and support. Discounted pricing is available through Sanity Solutions rather than direct.
Nonprofit or lower-education institution? We offer free accounts for qualified organizations. Email us →
Frequently asked
What's included with Enterprise?
Everything in Pro, plus built-in CI/CD security scanning — DAST, SAST, and SCA that run on every deploy — and volume pricing sized to your program. Enterprise is sales-assisted: send us a note through the contact form and we'll scope it with you.
Is signup self-serve?
Yes. Free, Standard, and Pro are all self-serve — create an account at app.simplesec.ai, verify your work-email domain, and you're testing. Enterprise is sales-assisted: fill in the contact form and we'll get you set up.
Can I buy through a reseller?
Yes. Sanity Solutions is our Gold reseller partner, and buying any paid tier through them gets you gold-tier discount pricing — Standard, Pro, and Enterprise alike. Discounted pricing is available through Sanity Solutions rather than direct.
How much are additional organizations on Pro?
Pro includes your first organization. Each additional organization is $199.99/month, and we offer bulk discounts as the count grows — tell us how many you're planning for and we'll price it.
What does the Free tier actually do?
It's a 7-day full-access trial — the same pipeline and the same complete output as Pro: full finding details, evidence chain, and exportable reports, capped at 5 tests per 24 hours. When the 7 days are up your workspace goes read-only — every prior result stays fully accessible, you just upgrade to run new tests.
How many tests do I get?
Standard includes 10 tests per month within your scope. Pro and Enterprise are unlimited — no test caps at all. The Free trial is capped at 5 tests per 24 hours for 7 days.
Why do I need a verified domain at signup?
It's how we make sure tests land on assets you actually own. After signup we send a verification link to your work email and check the domain is real. The same check applies to every tier.
Do I need permission to test?
Yes. SimpleSec is for authorized testing only. By using SimpleSec you confirm you have explicit permission from the asset owner. We log every test against audit-ready trails for exactly this reason.
Can I run pentests on internal networks?
Yes — internal-network testing is included on Pro and Enterprise via the WireGuard agent. You drop the agent into the target environment; SimpleSec tunnels through it for AD enumeration, lateral-movement validation, and the rest.
Can I plug SimpleSec into my CI/CD pipeline?
Yes — CI/CD security scanning (DAST, SAST, and SCA) is included with Enterprise. An API key lets your pipeline trigger a test on every deploy, with findings flowing into the same dashboard, evidence chain, and report exports as your manual tests.
What's the difference between Standard and Pro?
Standard is for testing your own organization — one org, up to 10 tests a month. Pro is for MSSPs, MSPs, and consultants: unlimited scanning, multi-organization management from one console with isolated engagements and evidence stores, internal-network testing, and branded reports. Your first organization is included and additional ones are $199.99/month with bulk discounts. Enterprise then adds pipeline-native CI/CD scanning and volume pricing.
Where is my data stored?
On infrastructure operated by Summit Cyber. Sensitive material — credentials, MFA secrets, WireGuard keys — is encrypted at rest with Fernet. On-prem deployment is available for Enterprise customers with strict data-residency requirements.
Not sure which tier fits?
Tell us what you're trying to do. We'll point you at the right one.