Pricing
Plans that fit how you ship.
Every paid plan comes with AI pentest credits each month, plus passive scans, alerts and reports. Business adds continuous pentesting. Not ready to buy? Run a free passive scan.
Free
€0/mo
No credit card required.
Get startedTop-up pentest credits
No plan needed. Buy credits and spend them on a pentest whenever you want. Buy credits
- Core passive, read-only scans
- Step-by-step remediation
- Security score history
Essential
€199/mo
Cancel anytime.
SubscribeAbout 1 Light pentest a month.
- Everything in Free, plus:
- 410 pentest credits a month
- Complete passive, read-only scans
- Weekly passive scans, 1 domain
- Email alerts
- Standard support
Recommended for growing teamsBusiness
Custom
Priced to your apps, how often you test and how deep.
Book a scoping callWe reply within one working day.
- Everything in Essential, plus:
- Continuous AI pentesting
- Volume discounts on pentest credits
- A pentest program scoped to your apps
- Teams and organizations
- API access
- Daily passive scans, 10 domains
- Slack and Teams alerts
- Priority support, dedicated contact
Hosted in Sweden. Data stored and AI processing in the EU.
Compare plans side-by-sideCredits
Pentests are paid for in credits.
Credits come two ways. A plan is a monthly bundle, and bigger bundles cost less per credit. Pay yearly and you save another 20%. A one-off top-up is a flat €0.50 a credit. If you need more than the largest bundle, talk to us about volume pricing. Every pentest runs at a level, and the level sets how many credits that test can spend.
Need a report for customers or auditors? From Standard up a security engineer reviews the report before you get it, and from Deep up they can sign it off.
| Level | What it does | Expert review | Credits |
|---|---|---|---|
| Light | One fast pass over every attack class. A quick read between deeper runs. | Not includedno review | 400 credits |
| Standard | Every area tested end to end. A full pentest on a regular cadence. | Includedexpert review | 1,000 credits |
| Deep | More attack paths chased per area, chaining findings through the authenticated surface. The one test you run all year. | Includedexpert review | 4,000 credits |
| Extended | Time on target to chase the deeper attack paths right across a large app. For a big API surface, or many screens behind the login. | Includedexpert review | 8,000 credits |
| Maximum | The deepest chaining we do, on one target. Everything we have. | Includedexpert review | 12,000 credits |
Every level tests the same attack classes, across every user role and tenant you give it. Levels differ in how much of your app gets reached, not in what we look for.
A level is a limit, not a price
Each run is charged only for the credits it uses, up to its level. A failed run costs nothing.
They last
Bought credits last a year, and plan credits last their cycle plus a grace month.
Business is priced to what you run, with volume pricing on credits.
Compare plans
Side-by-side, feature by feature.
| Feature | Free | Essential | Business |
|---|---|---|---|
| Pentesting | |||
| AI pentesting | Pay per run (top-up) | Included | Included |
| Continuous AI pentesting | Not included | Not included | Included |
| Regression tracking across runs | Not included | Not included | Included |
| AI pentest credits | Top-ups only | Monthly bundle | Volume discounts |
| Pentest report + free retest | Included | Included | Included |
| Expert review / signed report | From Standard / from Deep | From Standard / from Deep | From Standard / from Deep |
| Account and billing | |||
| Teams and organizations | Not included | Not included | Included |
| API access | Not included | Not included | Included |
| Invoice billing | Not included | Not included | Included |
| Hosted in Sweden, data stored in the EU | Included | Included | Included |
| Support | Basic | Standard | Priority, dedicated contact |
| Passive scanning | |||
| Passive scanning (incl. subdomains) | Not included | 1 domain, weekly | 10 domains, daily |
| Checks per scan | 18 | 35+ | 35+ |
| Scans per day | 5 | 50 | 500 |
| Pages per scan | 3 | 20 | 200 |
| Scan alerts | Not included | Email, Slack, Teams | |
FAQ
Frequently asked.
What is a credit?
A credit is the unit an AI pentest is paid in. Every pentest runs at a level, and the level sets how many credits that test may spend: Light 400, Standard 1,000, Deep 4,000, Extended 8,000, Maximum 12,000. Credits come with an Essential plan every month, or as a one-off top-up at €0.50 a credit. Passive scans, their alerts and reports come with your plan and never touch your balance.
What does a paid plan include?
Essential is a monthly bundle of pentest credits, from 410 a month, and the Essential plan itself comes with it at no extra charge: complete passive scans, a weekly passive scan of one domain and email alerts. A bigger bundle works out to less per credit, and paying yearly saves another 20%. Business is priced to what you run, through sales, credits included, and adds daily passive scans across 10 domains (more through sales), Slack and Teams alerts, priority support and scoped engagements. Free includes no credits.
How am I charged for a pentest?
You pick a level when you set the test up, and the run holds that level's credits when it starts. When it finishes you are charged for what it actually used, never less than 100 credits and never more than the hold, and the rest goes straight back to your balance. A test that fails is not charged at all. One you cancel is charged only for the work it got through, with no minimum. The full report comes with the run: there is no second payment to read the findings.
What if I run out of credits?
Buy a top-up, whenever you want, at €0.50 a credit: 100, 200, 400, 1,000, 2,000 credits, or any whole amount from 100 up. A top-up is an amount, not a test. What it funds depends on the level you run at. If you keep running short, moving to a bigger bundle is the cheaper fix, because a bigger bundle costs less per credit and a top-up is always the flat rate. If your balance is short when you set a pentest up, the Summary step shows exactly how many credits you need. Buying more than 8,000 credits at once? Contact sales for a volume rate.
Do credits expire, and what happens if I cancel?
Credits your plan grants last the cycle they belong to plus a grace month, so an unused grant is still spendable when the next one lands. Credits you buy last twelve months from the purchase. Spending always takes the credits closest to expiring first. Cancelling stops the next charge and the next grant. It doesn't empty your balance, and what's in it stays spendable until its own expiry date.
Are credits refundable?
Unused credits are not cashed out, but you are never charged for testing you did not get: a failed test returns its whole hold, a cancelled one returns everything except the work it had done, and a finished test is charged for what it used with a 100 credit minimum. Paid plans have a 14-day refund window from the first charge. And if a report does not hold up, email contact@barrion.io and we return the credits it spent.
Is a human involved, or is it only the AI?
Both, from Standard up. The agent does the testing, and at Standard and deeper levels a security engineer reviews the report before it is released to you. From Deep up, that engineer can also sign off the report. A Light test releases its report as soon as it finishes. Expert review comes with the level you test at rather than off your credit balance, so nothing is deducted for it.
Do I get a retest after fixing the findings?
Yes, and it costs nothing. Once you have shipped fixes you can rerun the same pentest as a retest: it reuses the original scope, and the test credentials while they're still stored, checks each finding again, and marks it fixed, not fixed or inconclusive. A retest holds no credits.
Can I run pentests on a schedule?
Yes, on the Business plan. Save a pentest and Barrion reruns it daily, weekly, monthly, quarterly, every six months, yearly or on a custom rhythm. Each schedule has its own scope and depth. Choose whether it runs every time, or only when your app has changed. Each scheduled run's findings are labelled new, still open, resolved or regressed against the run before. Continuous programs are scoped to your apps, cadence and depth, so talk to sales and we'll price one for your setup.
What is included in the free plan?
The Free plan runs 18 core passive security checks with 5 scans a day across 3 pages per scan, with step-by-step remediation, score history and PDF export, for as long as you want and with no card. It includes no pentest credits, but you can buy a top-up and run a pentest from a free account.
How much does paying yearly save?
About 20% against twelve monthly payments, on the whole subscription: the credits are the plan, so the discount is on them too. A year of credits is granted on day one rather than a month at a time.
Can I change or cancel my plan?
Yes, anytime, from your plan page: pick a bigger or smaller bundle on the Essential card, or cancel through Manage Subscription. A bigger bundle applies right away and a smaller one from your next renewal.
Anything else? Email contact@barrion.io.
Not sure which level you need?
A 30-minute scoping call covers your apps, cadence and depth.