PRICING
Simple, transparent pricing
Start with a 14-day free trial. No credit card required. Protect your applications from day one.
Monthly
Annual
Pro
$99
/month
14-day free trial, cancel anytime
DAST Scanning
10 targets, 50 scans/month
API Scanning
10 APIs (REST, GraphQL, gRPC, SOAP)
Supply Chain (SCA)
15 repositories
Secrets Scanning
15 repositories
Scheduled Scans
Automated recurring scans
Vibe Risk Score
AI-generated code risk scoring
Vulnerability Management
Track, triage, and remediate
CVE Detection & Threat Intel
NVD, GHSA, KEV matching
Standard Reports
PDF export with findings
5 Team Members
Role-based access
Enterprise
Custom
Tailored to your organization
Custom demo and onboarding
Everything in Pro, plus:
Unlimited targets, scans & repos
No usage limits
PR Security Gates
GitHub Check Runs on every PR
Shadow API Detection
Find undocumented APIs
Shadow AI Monitoring
Detect unauthorized AI usage
Custom Branded Reports
Your logo, your compliance format
SSO / SAML Authentication
Enterprise identity providers
Full API Access
Integrate with your toolchain
Dedicated Support & SLA
Priority response times
Custom Integrations
Jira, Slack, PagerDuty, and more
Unlimited Team Members
No seat limits
Frequently Asked Questions
Everything you need to know about Sectora
After your trial ends, you can subscribe to the Pro plan to continue using Sectora. All your scan data, findings, and configurations are preserved. If you choose not to subscribe, your account will be paused but your data will be retained for 30 days.
Yes. You can upgrade from Pro to Enterprise at any time by contacting our sales team. Downgrades take effect at the end of your current billing cycle.
Yes, annual billing is available at a 20% discount. Contact us for annual pricing on the Pro plan, or request a custom quote for Enterprise.
We accept all major credit cards (Visa, Mastercard, American Express) and bank transfers for annual Enterprise contracts. All payments are processed securely through Stripe.
Absolutely. All data is encrypted at rest and in transit. We never store your source code. Scan results are isolated per organization with row-level security. SOC 2 Type II compliance is in progress.
Sectora supports web applications, REST APIs, GraphQL, gRPC, SOAP, and WebSocket endpoints. For supply chain scanning, we support npm, Go modules, and PyPI ecosystems with more coming soon.
Ready to secure your applications?
Join teams who trust Sectora to find vulnerabilities before attackers do.