Plans
Pricing
Every plan includes every feature. What you pay depends on the size of your company, and each plan covers a number of hosts. Your first discovery shows where you stand.
Free
Fewer than 5 employees, or pre-seed
Up to 10 hosts
€0
Up to monthly full-depth tests
Included:
- Every superhack feature
- Unlimited users
- IdP integration via SAML
- MCP server and API
- EU hosting
- Dedicated Slack support
Startup
Up to 100 employees
Up to 150 hosts
€1,500/ month
Up to monthly full-depth tests
Included:
- Every superhack feature
- Unlimited users
- IdP integration via SAML
- MCP server and API
- EU hosting
- Dedicated Slack support
Mid-tier
101 to 250 employees
Up to 500 hosts
€5,000/ month
Up to monthly full-depth tests
Included:
- Every superhack feature
- Unlimited users
- IdP integration via SAML
- MCP server and API
- EU hosting
- Dedicated Slack support
Enterprise
More than 250 employees
Hosts agreed with you
Custom
Number of tests and workspaces agreed with you
Included:
- Every superhack feature
- Unlimited users
- IdP integration via SAML
- MCP server and API
- EU hosting
- Dedicated Slack support
Fair use. The host allowance covers what most companies of that size expose. Hostnames that lead to the same endpoint are grouped and count once. Your first discovery shows where you stand, usually within 24 hours. If you are well above your plan, we suggest the right one before anything changes.
FAQ
Common questions
01Can we try superhack first?
Yes. Anyone can try superhack for free, at any time, and we are glad when you do: the findings show the quality better than anything we could write here. Start with your work email below; your first results usually arrive within 24 hours.
02What is the difference between monthly and weekly?
How often superhack tests all of your assets in full depth: once a month or once a week. Every full-depth run takes real compute on our side, so the more often it runs, the more it costs.
03What counts as a host?
A host is a unique endpoint, by IP address and DNS name. superhack groups what it finds into asset groups: hostnames that lead to the same endpoint, such as aliases, redirects or several names in front of one service, are recognized as one and counted once. You pay for the unique endpoints, not for every name that points at them.
04What if we have more hosts than our plan covers?
Your first discovery shows where you stand, usually within 24 hours. If you are well above your plan, we suggest the right one before anything changes.
05How does billing work?
Contracts run for one year, paid in advance. If you would like a longer term, we are happy to talk about a discount.
Get started
See what an attacker would find. Results within 24 hours.
Prefer to talk first? Half an hour with the founders