Priced by organizations and assets, not by scans
Every plan includes verification-first scanning, CVE correlation and the AI exposure brief. Scans are unlimited within your asset allowance. Annual billing saves two months. 14-day trial, no card required.
Starter
One organization, continuous external monitoring.
€390per month
€3,900 / yr
- organizations
- 1
- assets
- 150
- seats
- 3
- retention
- 90 days
- Daily passive discovery, weekly active scans
- CVE correlation (NVD, KEV, EPSS)
- Domain verification & scan authorization
- AI exposure brief
- Email notifications
- CSV exports
€2.00 per extra asset / mo
Start free trialProfessional
Most popularSecurity teams monitoring several business units.
€1,290per month
€12,900 / yr
- organizations
- 5
- assets
- 1,500
- seats
- 15
- retention
- 1 year
- Everything in Starter
- Hourly change detection, daily active scans
- AI Copilot (1,000 questions / mo)
- Automations (25 rules)
- Cloud & DNS sync connectors
- Slack, Jira & webhooks
- SSO (SAML)
€0.80 per extra asset / mo
Start free trialMSSP
Multi-tenant portfolio for managed service providers.
€2,900per month, from
from €29,000 / yr
- organizations
- 25
- assets
- 10,000
- seats
- 50
- retention
- 3 years
- Everything in Professional
- Portfolio overview & tenant isolation
- Unlimited Copilot & automations
- White-label reports & AI client updates
- API & SIEM export
- 99.9% uptime SLA
€95 per extra client org · €0.25 per asset
Talk to salesEnterprise
Large estates with residency and deployment requirements.
Customannual contract
typically €45k+ / yr
- organizations
- Unlimited
- assets
- 50,000+
- seats
- Unlimited
- retention
- Custom
- Everything in MSSP
- On-prem scanner agents for internal ranges
- Dedicated worker pools & egress IPs
- EU / US data residency
- SCIM, audit export & custom roles
- Dedicated CSM & 99.95% SLA
Committed volume pricing
Talk to salesPrices exclude VAT. An asset is a monitored hostname, IP, or certificate that is in scope. Shared infrastructure and rejected candidates are never billed.
Questions security teams ask
How do assets get into CVERisk before any scan?
Through sources: root domains and IP ranges you add as seeds, read-only cloud/DNS/registrar connectors, CSV or API imports, and passive intelligence such as Certificate Transparency. Assets from accounts you control are confirmed automatically; everything discovered publicly goes through Candidate Review first.
Will you scan things we do not own?
No. Passive collection only touches public data. Active probes require a verified domain, a signed authorization and an open scan window. Shared infrastructure such as CDN anycast ranges is never treated as owned.
What does the AI actually do?
It summarizes and explains. The Copilot answers questions using read-only tools over your workspace data and cites assets and changes. It never changes policy bands or runs scans on its own.
Can we run it for multiple clients?
Yes. The MSSP plan gives you tenant isolation, a portfolio overview, per-client reports and role-based access per organization.
See your own perimeter in 15 minutes
Add a root domain, connect one cloud account, and get your first exposure brief today.