Unlimited AI red-team scans on every plan
No scan quota and no usage bill. Plans differ in seats, governance, and how many scans run at once, so testing on every change never raises the invoice. Pro, Team, and Business all check out self-serve.
Scan plans
Pro
For individual developersTeam
For teams shipping AI agentsBusiness
SSO, audit logs & retention controlsEnterprise
For regulated teams that need a private deploymentCompare plans
Every tier includes everything in the tier below it. The scan engine, the full probe library, and complete report evidence are in every plan from Pro upward. Higher tiers add seats, more scans running at once, governance, and deployment controls. Prices shown are monthly; annual billing is ten months' price for twelve.
| Feature | Pro$149/mo | Team$499/mo | Business$1,999/mo | EnterpriseContact us |
|---|---|---|---|---|
| Scanning | ||||
| Scans | Unlimited | Unlimited | Unlimited | Unlimited |
| Scans running at once | 1 | 3 | 10 | 25+ |
| Scans started per hour | 3 | 10 | 30 | 100+ |
| Endpoint and runtime scans | Included | Included | Included | Included |
| Full report evidence & remediation | Included | Included | Included | Included |
| CI runs through the REST API and SDK | Included | Included | Included | Included |
| PDF export & API access | Included | Included | Included | Included |
| Collaboration | ||||
| Seats | 1 | 5 included | 15 included | Custom |
| Shared workspace & roles | Not included | Included | Included | Included |
| Slack, Jira & Linear integrations | Not included | Included | Included | Included |
| Shareable report links | Not included | Included | Included | Included |
| Security & governance | ||||
| SSO / SAML | Not included | Not included | Included | Included |
| Audit logs | Not included | Not included | Included | Included |
| Data-retention controls | Not included | Not included | Included | Included |
| SCIM provisioning | Not included | Not included | Included | Included |
| Private-cloud deployment | Not included | Not included | Not included | Included |
| Custom judge panel & model routing | Not included | Not included | Not included | Included |
| Support | ||||
| Priority support | Not included | Not included | Included | Included |
| Contracted SLA & security review support | Not included | Not included | Not included | Included |
Questions about plans and billing
Are scans really unlimited on every plan?
Yes. There is no monthly scan quota and no usage bill. Each plan caps how many scans run at once and how many start in an hour, which keeps one runaway CI loop from eating shared capacity. Pro runs 1 scan at a time and starts up to 3 an hour. Team runs 3 at a time and starts 10 an hour, Business 10 and 30. Enterprise limits are set in the contract.
Is there a free trial?
Pro includes a 14-day trial with 10 scans. A card is required, and you can start the paid plan early from Billing settings if you use the scans before the trial ends. Team and Business have no trial. Start on monthly billing and cancel before renewal if it isn't a fit.
Is there a free plan?
There is no hosted free tier. The open-source ZeroLeaks CLI is free to run with your own model provider keys. The hosted plans add the managed agent attack engine, stored reports, and team features.
How do seats work on Team and Business?
Team includes 5 seats and Business includes 15. Extra seats are billed on the most members the workspace had during the billing period.
Do you offer annual billing?
Yes. Pro, Team, and Business can be billed yearly at ten times the monthly price. Seats added partway through the year are prorated.
What does Enterprise cost?
Enterprise is priced per deployment, so contact sales for a quote. It adds a private-cloud deployment, your own judge panel and model routing, custom scan limits, and a contracted SLA.
Do I need to talk to sales?
Only for Enterprise. Pro, Team, and Business are all self-serve through checkout, with no demo call required before you can start testing.
Which plan do I need for CI/CD?
Pro. Every plan can start scans from CI through the REST API and the SDK, and each run returns a score and findings you can gate a release on. CI use is not an upsell. Team adds shared workspaces, more scans running at once, and issue-tracker routing for the results.
What every plan tests for
Test AI applications for prompt injection, instruction hijacking, tool abuse, and multi-turn attacks before they reach production.
AI Red Teaming for LLM Apps and AgentsAutomated AI red teaming for LLM applications, agents, system prompts, retrieval flows, and tool-calling workflows.
AI Agent Security TestingTest AI agents for prompt injection, unsafe tool calls, over-permissioned actions, secret exposure, and workflow boundary failures.
LLM Security Scanner for AI AppsRun automated LLM security scans for prompt injection, prompt leakage, tool abuse, model behavior regressions, and AI security reports.
