ExposureSignal
Book a Demo
ExposureSignal Pricing

Pricing built around how often we test

Every plan covers all of your authorized domains, public IP addresses, and websites. Plans differ in how often we test and how many internal networks we scan.

Book a 20-Minute DemoView Plans
Plans

Choose the testing program that matches your risk surface

Essentials

$499/month

12-month commitment not required. Billed monthly. Save 5% when you pay upfront.

Testing included each month

2 full scans a month

Schedule them twice a month or run them anytime, each covering every authorized external asset. Plus fix checks any day.

  • External testing of all your authorized domains, IPs, and websites
  • Checks email authentication and mail security, DNS configuration, TLS and certificates, website security headers and cookies, detected software versions, and exposed ports and services.
  • Discovers subdomains, potentially claimable subdomains, public web paths, login and admin portals, exposed sensitive files, publicly listed cloud storage, and registered lookalike domains.
  • Reviews public breach records for your websites and checks verified GitHub organizations for leaked secrets.
  • Matched vulnerabilities are enriched with NVD data, CISA Known Exploited Vulnerabilities, and EPSS exploit-likelihood scores where available.
  • Checks run within your authorized scope and hosting restrictions.
  • Executive, technical, and insurance readiness reports
  • AI-guided remediation steps for every finding

Try Essentials free for 7 days: Essentials checks, one full assessment, and one fix check a day. One trial per organization.

Start 7-Day Free Trial

No card required. $499/month if you continue.

ProfessionalMost Popular

$1,299/month

12-month commitment required. Billed monthly. Save 5% when you pay year upfront.

Testing included each month

4 full scans a month

Plus internal scanning of up to 2 networks, each scanned twice a month, daily change watch, certificate monitoring, and fix checks any day.

  • Everything in Essentials, scanned twice as often
  • Internal scanning of up to 2 networks (subnets or VLANs of up to 254 devices each) through an outbound-only scanning appliance
  • Risk trends and remediation tracking for leadership
  • A dedicated on-site scanning appliance, owned by Exposure Signal, with device setup included
  • Internal vulnerability checks for reachable workstations, servers, printers, switches, and firewalls on covered networks
  • Scan results stored on the appliance and uploaded securely to your encrypted account
Select Plan

Sign in to your account to continue.

Book a 20-Minute Demo
Managed Exposure Program

Contact Sales

12-month commitment required. Billed monthly. Save 5% when you pay year upfront.

Testing included each month

8 full scans a month

Plus internal scanning of up to 4 networks, each scanned four times a month, daily change watch, certificate monitoring, and fix checks any day.

  • Everything in Professional
  • Internal scanning of up to 4 networks, each scanned four times a month
  • Monthly expert review of critical and high findings with a Security Specialist
  • Cloud posture assessment
  • Assisted onboarding included
  • Named security contact, next-business-day response
  • Quarterly executive briefing
  • Custom AI credit allowance
Book a DemoTalk to Sales

Plan details

Scan & testing details

Full scansEvery check, on every plan, across all of your authorized external assets. Schedule them or run them whenever you need, such as after a major change or to confirm a group of fixes.
Essentials2/monthProfessional4/monthManaged8/month
Internal networksHow many internal networks you can have in scope. A network is one subnet or VLAN of up to 254 devices (a /24). Every device in it is scanned and reported.
Essentials—ProfessionalUp to 2ManagedUp to 4
Internal network scansOne scan of one internal network by your outbound-only scanning node. Scanning 2 networks once each uses 2 scans. Results are reported like external scans.
Essentials—Professional4/monthManaged16/month
Fix checksRe-runs only the check behind one finding, on only the affected asset, and returns a result in about a minute.
EssentialsDailyProfessionalDailyManagedDaily
Change watchDaily alerts for changed name servers, mail servers, SPF and DMARC, and newly opened ports. Nothing contacts your servers.
Essentials—ProfessionalDailyManagedDaily
Certificate monitoringDaily alerts for new certificates issued for your domains, from public Certificate Transparency logs. Nothing contacts your servers.
Essentials—ProfessionalDailyManagedDaily
AI creditsMonthly credits for the AI remediation assistant, which explains findings and recommends fixes.
Essentials5,000 creditsProfessional13,000 creditsManagedCustom
Expert reviewA PremCom security engineer reviews your critical and high findings and walks your team through priorities on a call.
Essentials—Professional—ManagedMonthly
  • Full scans run at most once per site per day, and internal scans at most once per network per day, to protect your systems. Monthly allowances reset on the 1st.
  • After an unsuccessful fix check, that finding can be re-checked again after 24 hours. After three in 30 days, your next full scan confirms the fix instead.
  • Need more testing? Move up a plan, or contact us if you need more than Managed includes.
Included in every plan

Reports for every audience

Every assessment produces three reports from the same evidence, so leadership, your technical team, and your insurer all work from one record.

Executive report

For leadership and the board

A plain-language summary of where exposure is rising or falling, what it could cost the business, and how remediation is progressing.

Technical report

For IT and security teams

Every finding with its evidence, affected system, severity, risk score, and step-by-step remediation, prioritized so the team knows what to fix first.

Insurance readiness report

For insurers and brokers

Observed controls, exposure trends, and remediation records packaged for cyber insurance applications, renewals, and underwriting questions.

AI-guided remediation

AI recommends the fix. Your team stays in control.

Every plan includes the AI remediation assistant. It gives guidance and recommended steps; it does not make changes to your systems. Your team or a remediation partner applies the fix, and a fix check confirms it.

What the AI does

  • Explains each finding in plain language
  • Recommends step-by-step remediation for your environment
  • Answers follow-up questions as your team works through a fix

What it never does

  • Log in to, change, or reconfigure your systems
  • Apply patches or fixes on its own
  • Act without your team deciding what happens next
Add-Ons

Optional extras

Services you can add to your plan when you need them.

Assisted onboarding (Essentials; included on Managed)$1,200 one-time
Manual penetration testing$1,000 per day
Remediation, emergency, or compliance supportContact us
FAQ

Plan questions, answered plainly

How is internal scanning counted?

By network. A network is one subnet or VLAN of up to 254 devices, such as 10.0.1.0/24. Professional covers up to 2 networks and includes 4 internal network scans a month, so you can scan each network twice. Managed covers up to 4 networks with 16 scans a month, so you can scan each one four times. Each time one network is scanned, it uses one scan. The appliance checks reachable devices in each covered network; coverage depends on network access and the services each device exposes. Smaller ranges count by their size, so several small ranges can share one network. Need more networks? Contact us.

What is a fix check?

It re-runs only the check behind one finding, on only the affected asset, to confirm a fix in about a minute. After an unsuccessful result it waits 24 hours, and after three in 30 days your next full scan confirms the fix instead.

What does the Managed expert review include?

Each month a PremCom security engineer reviews your critical and high findings and walks your team through priorities on a call. Your team still decides on and applies every fix, and fix checks confirm them. It is included in the Managed Exposure Program.

Can I scan every day, or get more scans?

Fix checks, yes. Full scans come from a monthly allowance (2 on Essentials, 4 on Professional, 8 on Managed) that you can schedule or run whenever you need, with at most one per site a day to protect your systems. Every plan runs every check; plans differ in how often you scan. Allowances reset on the 1st. Need more? Move up a plan, or contact us if you need more than Managed includes.

Is the AI remediation assistant included?

Yes, on every plan. The assistant explains findings and recommends how to fix them, using a monthly credit allowance. It never makes changes to your systems. See View Scan & Testing Details for each plan's allowance.

How are findings labeled?

Confirmed means a check observed it directly. Potential (version-based) means the reported software version falls in a published vulnerability range but was not tested. Unconfirmed (passive data) means it was seen in internet scan data and not yet checked directly.

What do I need to install?

Nothing for external testing. Professional and Managed include a dedicated on-site scanning appliance owned by Exposure Signal, with device setup included. It needs power, outbound internet access, and access to the covered networks; no inbound internet firewall ports need to be opened.

Does ExposureSignal make changes to our systems?

No. We provide findings, AI-guided fix recommendations, and reporting. Neither the platform nor the AI assistant changes your systems. Your team or a remediation partner makes the changes, and fix checks confirm them.

Find your exposure before attackers do

Choose a plan to see where your organization is exposed today.

Book a 20-Minute DemoContact Sales