Pricing
Pricing
The full assessment is free.
Pay for the platform.
Run a complete, read-only AD assessment at no cost. Every finding, with attacker context and remediation. Upgrade when you need history, scale, or team features.
Founding customer pricing is live. The first 25 customers lock in 50% off for life. Prices only rise for new customers.
Free
Free
See your full AD risk once. The complete assessment for a single domain, no strings.
$0
/ forever
1 domain · 1 user
The full assessment
✓All findings, no cap or preview
✓Attacker insight + remediation steps
✓MITRE & compliance mappings
✓Risk posture score + quick wins
Platform
✓2FA included
✕Latest scan only, no history or trends
✕Community support only
Standard
Standard
Track posture over time. For an internal team hardening a single AD environment.
$1,500
/ year
$3,000 / year list price
Founding price, save 50%
1 domain · 3 users
Everything in Free, plus
✓Scheduled & recurring scans
✓Full scan history & report history
✓Trend tracking + scan-to-scan diff
✓Executive summary export
✓Custom logo on reports
Access & Support
✓3 users included
✓Standard support
Most Popular
Auditor
Scale across domains and clients. For consultants, MSSPs, and auditors, with the commercial rights to use it on other organizations.
$5,000
/ year
$10,000 / year list price
Founding price, save 50%
Up to 50 domains · Unlimited users
Everything in Standard, plus
✓Up to 50 domains
✓Unlimited users
✓Commercial / MSSP use rights
✓Assess unlimited client organizations
✓White-label reports
✓Role-based access control
Access & Support
✓Priority support
◐API access planned
Enterprise
Enterprise
Deploy your way, with white-glove support. Unlimited scale, SSO, and air-gapped mode.
Custom
Tailored quote · contact our team
Unlimited domains · unlimited users
Everything in Auditor, plus
✓Unlimited domains
✓Offline / air-gapped mode
✓SSO / SAML
Support & Deployment
✓Dedicated onboarding / CSM
✓White-glove support
✓Custom contract & procurement
◐Ticketing / SIEM / webhooks planned
No credit card to start
Read-only, no production impact
Annual subscription
Founding price locked for active subscribers
Built by offensive security practitioners
Full feature comparison
| Feature | Free | Standard | Auditor ★ | Enterprise |
|---|---|---|---|---|
| Pricing | ||||
| Annual price | $0 | $1,500 founding $3,000 list |
$5,000 founding $10,000 list |
Custom |
| Billing motion | Self-serve | Self-serve | Self-serve | Sales-assisted |
| Findings & assessment content | ||||
| All findings (no cap) | ✓ | ✓ | ✓ | ✓ |
| Attacker insight per finding | ✓ | ✓ | ✓ | ✓ |
| Step-by-step remediation guidance | ✓ | ✓ | ✓ | ✓ |
| MITRE ATT&CK + compliance mapping | ✓ | ✓ | ✓ | ✓ |
| Risk posture score + quick wins | ✕ | ✓ | ✓ | ✓ |
| Scanning & scope | ||||
| Active Directory scan (135+ checks) | ✓ | ✓ | ✓ | ✓ |
| Domains included | 1 | 1 | Up to 50 | Unlimited |
| On-demand scans | A few per day | Unlimited | Unlimited | Unlimited |
| Scheduled / recurring scans | ✕ | ✓ | ✓ | ✓ |
| Read-only, no production impact | ✓ | ✓ | ✓ | ✓ |
| Offline / air-gapped mode | ✕ | ✕ | ✕ | ✓ |
| History & trends | ||||
| Retained scan history | Latest only | Full | Full | Full |
| Trend tracking (posture over time) | ✕ | ✓ | ✓ | ✓ |
| Scan-to-scan comparison (diff) | ✕ | ✓ | ✓ | ✓ |
| Reporting & exports | ||||
| HTML report | ✓ | ✓ | ✓ | ✓ |
| Executive summary export | ✕ | ✓ | ✓ | ✓ |
| Custom logo on reports | ✕ | ✓ | ✓ | ✓ |
| White-label reports | ✕ | ✕ | ✓ | ✓ |
| Access & users | ||||
| Users included | 1 | 3 | Unlimited | Unlimited |
| Two-factor authentication | ✓ | ✓ | ✓ | ✓ |
| Role-based access control (RBAC) | ✕ | ✕ | ✓ | ✓ |
| SSO / SAML | ✕ | ✕ | ✕ | ✓ |
| Licensing & use rights | ||||
| Internal-use rights | ✓ | ✓ | ✓ | ✓ |
| Commercial / MSSP / assess-other-orgs rights | ✕ | ✕ | ✓ | ✓ |
| Integrations & API | ||||
| API access | ✕ | ✕ | Planned | Planned |
| Ticketing / SIEM / webhooks | ✕ | ✕ | ✕ | Planned |
| Support & services | ||||
| Support level | Community | Standard | Priority | White glove |
| Remediation assistance (add-on) | Base rate | 15% off | 25% off | 40% off |
| Dedicated onboarding / CSM | ✕ | ✕ | ✕ | ✓ |
Optional Add-On
Remediation Assistance
Hands-on remediation and expert advisory from Breach Point practitioners. Separate from the software subscription, available on every plan.
On-demand remediation assistance from Breach Point practitioners
Finding interpretation, remediation planning, hands-on implementation, assessment support, executive readouts, and architecture review. Billed hourly and purchased as you need it with no long-term commitment. Your plan tier earns a discount off the base hourly rate.
Free plan
Base rate
Standard plan
15% off
Auditor plan
25% off
Enterprise plan
40% off
Enterprise & Custom
Need more than the Auditor plan?
Larger internal teams, high-volume MSP deployments, air-gapped environments, or custom integrations. Let's talk about what you need.
Unlimited domains
Offline / air-gapped mode
SSO / SAML
RBAC
White-glove support
Dedicated onboarding
Volume domain pricing
Common Questions
Pricing FAQ
Is the Free plan really the full assessment?
Yes. Free runs a complete, read-only scan of one domain and surfaces every finding, with attacker insight, remediation steps, MITRE and compliance mappings, and your risk posture score. It keeps your latest scan only. Paid plans add history and trends, scale, commercial rights, and deployment options, not the findings themselves.
What is founding customer pricing and how long does it last?
Founding pricing (50% off list) is available to the first 25 customers. Your rate stays locked for as long as you remain an active subscriber; it only increases if you cancel and resubscribe. New customers after the founding cohort pay list pricing.
What's the difference between Standard and Auditor?
Both include the full assessment. Standard is for an internal team hardening a single domain and adds history and trend tracking. Auditor is for consultants, MSSPs, and auditors: up to 50 domains, unlimited users, white-label reports, RBAC, and, critically, the commercial license to run assessments against other organizations. Using Insight Recon on clients requires Auditor or above.
Do you offer monthly billing?
All plans are annual. Annual billing is standard for security software and lets us keep pricing lower than monthly equivalents would allow. If monthly matters for your situation, contact us and we can discuss options.
How is Enterprise priced?
Enterprise is quoted to your environment, so pricing is custom. It covers unlimited domains and users, SSO, air-gapped deployment, dedicated onboarding, and white-glove support. Talk to our team and we'll scope it with you.
What does "remediation assistance" include?
Both advisory and hands-on help from Breach Point practitioners: finding interpretation, remediation planning, executive readouts, and hands-on implementation when you want us to do the fixes alongside your team. It's billed hourly, and active subscribers earn a discount off the base rate: 15% on Standard, 25% on Auditor, and 40% on Enterprise. Your exact rate is included in your quote.
Does running a scan impact my production environment?
No. Insight Recon is read-only. It enumerates Active Directory without making changes and runs from a single Windows host, so nothing is deployed to your DCs or endpoints. For recurring scans you can install it as a scheduled Windows service on that host. You'll need a domain account with appropriate read permissions.
What happens to my data and reports?
Scan data and reports are retained for active subscribers. Free keeps your latest scan; history and trend tracking are on Standard and above. You can delete your data at any time from your account. Full details are in our Privacy Policy and Terms of Use.
Get Started
Get your full findings, free.
Upgrade when it makes sense.
No credit card to run your first scan. See exactly what your AD looks like to an attacker, with every finding and its remediation, then decide what you need beyond it.