Pricing

Cheaper than the breach. Much cheaper than the consultants.

Simple plans priced by attack surface, with unlimited retests. No per-finding fees, no surprise change orders.

Plans

Start here
Rogue Sprint
$14,500per engagement · one application or perimeter

A ten-day autonomous pentest with proof for every finding. Ideal before a launch, an audit or a board meeting.

  • Up to 50 assets or 1 application
  • Web, API, external and Rogue/AI modules
  • Proof-of-exploit report + replay scripts
  • Retest of every fix within 30 days
  • Credits 100% toward Continuous
Book a Sprint
Most chosen
Rogue Continuous
$3,400per month, billed annually · up to 500 assets

The full Rogue swarm on your whole attack surface, every day, with retests on every merge.

  • All five attack modules
  • Continuous discovery of new assets
  • CI/CD gating and replay in pipeline
  • Ticketing, Slack and Teams integration
  • Quarterly Red Cell review session
Talk to an operator
24/7 defense
Nightwatch
$2,600per month, billed annually · up to 500 assets

An AI SOC agent investigating every alert and containing threats around the clock.

  • Unlimited alerts and investigations
  • Tier 0–2 containment controls
  • Incident command and timelines
  • SEC, NIS2 and DORA clock tracking
  • Free two-week shadow trial
Start a shadow trial
+

Full Spectrum

Rogue Continuous, Nightwatch and a dedicated Red Cell team for enterprises above 5,000 assets, self-hosted runners and air-gapped networks.

Custom · talk to us →
Estimator

What would it cost you?

A list-price estimate. Multi-year, nonprofit and public-sector terms are lower. Quotes are confirmed after a 30-minute scoping call.

Estimated annual list price$0
Rogue
—
Nightwatch
—
Same cadence with consultancy pentests
—
Get an exact quote →
FAQ

Pricing, answered.

Procurement teams: we have a standard MSA, DPA and security questionnaire pack ready to send.

Why do you price by asset rather than by test?

Because Rogue tests continuously. Pricing per asset — a host, application, API or cloud account in scope — means you never ration testing or wait for the next engagement window. Unlimited retests are included.

What counts as an asset?

A publicly routable host, a web application or API base URL, a cloud account or subscription, or an LLM application endpoint. Internal hosts in assumed-breach mode are counted per /24 subnet.

Is there a minimum term?

Rogue Sprint is a one-off engagement. Rogue Continuous and Nightwatch are annual subscriptions billed quarterly or annually. Every subscription starts with a 30-day out clause if we don't find something that matters.

Do you offer a proof of value?

Yes. A Rogue Sprint credits 100% toward an annual Rogue Continuous subscription signed within 60 days, and Nightwatch starts with a free two-week shadow trial.

Get an exact quote.

Thirty minutes, one operator, no slides. You'll leave with a fixed price and a start date.