Plans that keep attackers out and verify your partners
14-day free trial. No credit card required. Cancel anytime.
Single
Small sites that need regular attack checks
Billed monthly Billed €89.90 yearly
14-day free trial. No credit card required.
- Up to 2 websites
- 1 endpoint package
- 1 team member
Includes
- Monthly attack scans
- Basic reporting
- 1 notification integration
- Email notifications
- EU-based data center, GDPR compliant
Professional
Growing businesses with several sites and a team
Billed monthly Billed €299.90 yearly
14-day free trial. No credit card required.
- Up to 5 websites
- Up to 3 endpoint packages
- Up to 5 team members
Everything in Single, plus
- Every two weeks attack scans
- Advanced reporting & analytics
- 3 on-demand scans per month
- CI/CD pipeline triggers
- Up to 3 notification integrations
- Priority email support
Agency
Client portfolios plus supplier compliance
Billed monthly Billed €899.90 yearly
14-day free trial. No credit card required.
- Up to 10 websites
- Up to 5 endpoint packages
- Up to 15 team members
Everything in Professional, plus
- Daily attack scans
- Comprehensive reports
- Supplier Compliance & partner monitoring
- 10 on-demand scans per month
- Up to 10 notification integrations
- Reseller program
Need help choosing?
Answer a few plain-language questions and we will recommend a plan.
Compare plans
| Feature | Single | Professional | Agency |
|---|---|---|---|
| Websites | 2 | 5 | 10 |
| Endpoint packages | 1 | 3 | 5 |
| Scheduled scan frequency | Monthly | Every two weeks | Daily |
| Scans per month | 2 | 30 | 450 |
| On-demand scans per month | Not included | 3 | 10 |
| Scan reports | Basic reporting | Advanced reporting & analytics | Comprehensive reports |
| Supplier questionnaires | Not included | Not included | Included |
| Partner monitoring | Not included | Not included | Included |
| Team members | 1 | 5 | 15 |
| Notification integrations | 1 | 3 | 10 |
| CI/CD pipeline triggers | Not included | Included | Included |
| Reseller program | Not included | Optional | Included |
| Support | Priority email | Priority email | |
| EU-based data center | Included | Included | Included |
| GDPR compliance | Included | Included | Included |
| Free trial | 14 days | 14 days | 14 days |
Need compliance reporting, partner surface checks, or more clients? Partner Program · Enterprise
Optional services
Add hands-on help to any plan. Ask us for a quote.
- Backup & infrastructure management
- Vulnerability handling
- Cybersecurity consultation
- Cybersecurity insurance
Integrations
Connect Grawlr with the tools you already use.
Slack
Get alerts in Slack channels.
Discord
Post scan updates to Discord servers.
Mattermost
Route security notifications to Mattermost.
Rocket.Chat
Deliver scan events to Rocket.Chat rooms.
PagerDuty
Escalate critical findings to PagerDuty.
Opsgenie
Trigger incident alerts in Opsgenie.
Datadog
Push signals to Datadog monitors and dashboards.
Zendesk
Create support tickets in Zendesk.
Freshdesk
Open and track cases in Freshdesk.
n8n
Automate workflows with n8n.
Zapier
Connect to 7,000+ apps via Zapier.
Need something custom? Use webhooks and our compliance events for risk changes, questionnaires, and document expiry.
- EU-based data center
- GDPR-aligned data handling
- Secure payments by Stripe
- No plugins or agents
- Visit the Trust Center
Pricing questions
Do I need a credit card to start the free trial?
No. Every plan starts with a 14-day free trial without a credit card. Add a payment method only when you decide to continue.
Can I change plans later?
You can upgrade from Billing in your dashboard at any time, and the higher limits apply right away. Downgrading is not available from Billing, but our support team can move you to a smaller plan on request.
How does yearly billing work?
Pay once a year instead of every month and save up to 17% compared with monthly billing. Pick yearly with the toggle above before you start your trial.
Which plan includes supplier questionnaires?
Supplier Compliance and partner monitoring are included from the Agency plan. The Partner and Enterprise plans add compliance reporting and partner surface checks.
What counts as a website?
Each domain you add and verify counts toward your plan's website limit. You can remove a site and add another at any time.
Where is my data stored?
Self-service plans run in EU-based data centers. Payments are handled by Stripe; Grawlr never stores full card numbers.
Can I run attack tests on my live site?
You can, but treat it like a real attack. Grawlr only tests domains you have verified, runs the packages you choose, and avoids destructive exploitation. Heavier packages still send real attack traffic, which can slow down or even take down a fragile site. We strongly recommend testing a staging or test environment first, keeping a current backup, and scheduling production scans outside peak hours.
Is anything added to the price at checkout?
No. The prices shown are final. What you see on this page is what you pay.
What is an endpoint package?
A pre-configured set of tests that bundles attack patterns for one purpose, such as a monthly baseline, a platform like WordPress, or a class of attacks like injections. Your plan sets how many packages you can run, and packages are updated as new attack patterns appear.
We need more sites, clients, or custom controls. What then?
Contact us and we will put together a custom package with the limits you need, including tests for apps on AWS, Azure, or Google Cloud and frameworks like Spring Boot, .NET, React, or Angular. The Partner Program covers larger client portfolios with brandable reports and revenue share, and Enterprise adds network controls and AI-assisted testing.
Running a non-profit, school, or sports club? Contact us for special discounts.
Not ready to pick a plan?
See what attackers see first. The quick scan is free and needs no sign-up.
Run a free quick scan