We meter Hax in scan tokens — not assets, not endpoints, not a punitive per-IP model. Pick a tier, get a monthly token budget, use it however you need.
Continuous attack surface visibility for one organisation.
Mid-market organisations getting their first comprehensive view.
For security teams that need to act on what they find.
Security teams operating with an in-house SOC or MSSP.
Multi-tenant, MSSP, or large-organisation deployment.
MSSPs, large enterprises, and organisations with multiple subsidiaries.
Pricing is published per quarter. Talk to us for current per-tier rates and multi-year discount.
| Foundation | Professional | Enterprise | |
|---|---|---|---|
| Recon frequency | Weekly | Daily | Real-time |
| Vulnerability scans | Monthly + on-demand | Weekly + on-demand | Continuous |
| Dark web sweeps | Daily | Hourly | Real-time |
| Alert latency | 15 min | 5 min | < 1 min |
Scan tokens are how Hax meters reconnaissance work. A standard subdomain enumeration is 1 token. A full vulnerability scan against a discovered host is 5–20 tokens depending on depth. Continuous monitoring uses tokens at a slower rate than ad-hoc deep scans.
We'll size a tier and token budget to fit your environment in the demo call.
