Pricing

The full assessment is free.
Pay for the platform.

Run a complete, read-only AD assessment at no cost. Every finding, with attacker context and remediation. Upgrade when you need history, scale, or team features.

Founding customer pricing is live. The first 25 customers lock in 50% off for life. Prices only rise for new customers.
Free
Free
See your full AD risk once. The complete assessment for a single domain, no strings.
$0 / forever
1 domain · 1 user
The full assessment
All findings, no cap or preview
Attacker insight + remediation steps
MITRE & compliance mappings
Risk posture score + quick wins
Platform
2FA included
Latest scan only, no history or trends
Community support only
Standard
Standard
Track posture over time. For an internal team hardening a single AD environment.
$1,500 / year
$3,000 / year list price
Founding price, save 50%
1 domain · 3 users
Everything in Free, plus
Scheduled & recurring scans
Full scan history & report history
Trend tracking + scan-to-scan diff
Executive summary export
Custom logo on reports
Access & Support
3 users included
Standard support
Enterprise
Enterprise
Deploy your way, with white-glove support. Unlimited scale, SSO, and air-gapped mode.
Custom
Tailored quote · contact our team
Unlimited domains · unlimited users
Everything in Auditor, plus
Unlimited domains
Offline / air-gapped mode
SSO / SAML
Support & Deployment
Dedicated onboarding / CSM
White-glove support
Custom contract & procurement
Ticketing / SIEM / webhooks planned
No credit card to start Read-only, no production impact Annual subscription Founding price locked for active subscribers Built by offensive security practitioners
Full feature comparison
Feature Free Standard Auditor ★ Enterprise
Pricing
Annual price $0 $1,500 founding
$3,000 list
Custom
Billing motion Self-serve Self-serve Sales-assisted
Findings & assessment content
All findings (no cap)
Attacker insight per finding
Step-by-step remediation guidance
MITRE ATT&CK + compliance mapping
Risk posture score + quick wins
Scanning & scope
Active Directory scan (135+ checks)
Domains included 1 1 Unlimited
On-demand scans A few per day Unlimited Unlimited
Scheduled / recurring scans
Read-only, no production impact
Offline / air-gapped mode
History & trends
Retained scan history Latest only Full Full
Trend tracking (posture over time)
Scan-to-scan comparison (diff)
Reporting & exports
HTML report
Executive summary export
Custom logo on reports
White-label reports
Access & users
Users included 1 3 Unlimited
Two-factor authentication
Role-based access control (RBAC)
SSO / SAML
Licensing & use rights
Internal-use rights
Commercial / MSSP / assess-other-orgs rights
Integrations & API
API access Planned
Ticketing / SIEM / webhooks Planned
Support & services
Support level Community Standard White glove
Remediation assistance (add-on) Base rate 15% off 40% off
Dedicated onboarding / CSM

Optional Add-On

Remediation Assistance

Hands-on remediation and expert advisory from Breach Point practitioners. Separate from the software subscription, available on every plan.

On-demand remediation assistance from Breach Point practitioners
Finding interpretation, remediation planning, hands-on implementation, assessment support, executive readouts, and architecture review. Billed hourly and purchased as you need it with no long-term commitment. Your plan tier earns a discount off the base hourly rate.
Hands-On + Advisory
Free plan
Base rate
Standard plan
15% off
Auditor plan
25% off
Enterprise plan
40% off
Enterprise & Custom

Need more than the Auditor plan?

Larger internal teams, high-volume MSP deployments, air-gapped environments, or custom integrations. Let's talk about what you need.

Unlimited domains Offline / air-gapped mode SSO / SAML RBAC White-glove support Dedicated onboarding Volume domain pricing

Common Questions

Pricing FAQ

Is the Free plan really the full assessment?
Yes. Free runs a complete, read-only scan of one domain and surfaces every finding, with attacker insight, remediation steps, MITRE and compliance mappings, and your risk posture score. It keeps your latest scan only. Paid plans add history and trends, scale, commercial rights, and deployment options, not the findings themselves.
What is founding customer pricing and how long does it last?
Founding pricing (50% off list) is available to the first 25 customers. Your rate stays locked for as long as you remain an active subscriber; it only increases if you cancel and resubscribe. New customers after the founding cohort pay list pricing.
What's the difference between Standard and Auditor?
Both include the full assessment. Standard is for an internal team hardening a single domain and adds history and trend tracking. Auditor is for consultants, MSSPs, and auditors: up to 50 domains, unlimited users, white-label reports, RBAC, and, critically, the commercial license to run assessments against other organizations. Using Insight Recon on clients requires Auditor or above.
Do you offer monthly billing?
All plans are annual. Annual billing is standard for security software and lets us keep pricing lower than monthly equivalents would allow. If monthly matters for your situation, contact us and we can discuss options.
How is Enterprise priced?
Enterprise is quoted to your environment, so pricing is custom. It covers unlimited domains and users, SSO, air-gapped deployment, dedicated onboarding, and white-glove support. Talk to our team and we'll scope it with you.
What does "remediation assistance" include?
Both advisory and hands-on help from Breach Point practitioners: finding interpretation, remediation planning, executive readouts, and hands-on implementation when you want us to do the fixes alongside your team. It's billed hourly, and active subscribers earn a discount off the base rate: 15% on Standard, 25% on Auditor, and 40% on Enterprise. Your exact rate is included in your quote.
Does running a scan impact my production environment?
No. Insight Recon is read-only. It enumerates Active Directory without making changes and runs from a single Windows host, so nothing is deployed to your DCs or endpoints. For recurring scans you can install it as a scheduled Windows service on that host. You'll need a domain account with appropriate read permissions.
What happens to my data and reports?
Scan data and reports are retained for active subscribers. Free keeps your latest scan; history and trend tracking are on Standard and above. You can delete your data at any time from your account. Full details are in our Privacy Policy and Terms of Use.

Get Started

Get your full findings, free.
Upgrade when it makes sense.

No credit card to run your first scan. See exactly what your AD looks like to an attacker, with every finding and its remediation, then decide what you need beyond it.