How much does attack surface management cost?
Attack surface management costs from a few tens of dollars a month for lightweight tools to five figures a year for enterprise platforms, depending on how the vendor counts assets.
How do vendors charge? Four common ways.
The unit a vendor counts decides your bill. Ask what counts as an asset before you compare prices.
| Model | What you pay for | Published range | Watch for |
|---|---|---|---|
| Per asset | Each domain, host, address or application the tool tracks | An AWS Marketplace listing shows $12,000 a year for 250 application assets; an enterprise vendor listing shows $30,000 a year for 250 assets | Definitions of "asset" differ. Cost grows with every subdomain you add. |
| Per credit | A pool of credits spent on scans and other actions | Varies by vendor | Credits that expire each period. Cost follows how often you scan, not how much you own. |
| Per seat | Each person who logs in | Varies by vendor | Extra cost for auditors, managers and service providers who need to view results. |
| Flat tier | A fixed price for a band of use | About $25 to $200 a month for lightweight tools | Limits on domains, scans or features that push you to the next tier. |
Ranges are as published by the vendors and marketplaces named, in US dollars. They change. Re-check each one before publishing and add its source link.
What does that mean for 100 or 250 assets? A rough guide.
These figures divide the published listings above by their asset counts. Vendors rarely scale prices in a straight line, so treat them as a guide.
| Pricing basis | Per asset per year | 100 assets | 250 assets |
|---|---|---|---|
| Marketplace listing at $12,000 for 250 assets | $48 | $4,800 | $12,000 |
| Enterprise listing at $30,000 for 250 assets | $120 | $12,000 | $30,000 |
| Lightweight flat tier at $25 to $200 a month | Not per asset | $300 to $2,400 | $300 to $2,400, if the tier allows it |
A flat tier often has a cap on domains or scans. Check that your assets fit inside it.
What does EdgeProtect cost? Credit-based tiers in pounds.
EdgeProtect charges by credit, not by asset or seat. Team members are unlimited. Prices below are in GBP as published on the pricing page, which is the source of truth.
| Tier | Monthly | Credits each month | Annual |
|---|---|---|---|
| Basic | £299 | 800 | £3,499, with bonus credits |
| Business | £899 | 2,500 | £9,999, with bonus credits |
| Enterprise | £2,499 | 10,000 | £24,999, with bonus credits |
Scans spend credits, so cost follows how often you scan. Scans do not repeat by themselves; you start one when something changes. We have not converted these prices to dollars.
Lightweight tools are published at about $25 to $200 a month. Marketplace listings for 250 application assets are published at about $12,000 to $30,000 a year. The spread comes from how each vendor counts assets and what the tool does.
A flat tier is usually cheapest for a small estate, provided your domains and scans fit its limits. Per-asset pricing is cheapest when you have few assets and rarely add more.
It depends on the vendor. It can be a domain, a subdomain, a host, an IP address or an application. Ask for the definition in writing, because it decides your bill.
No. EdgeProtect charges by credit, and team members are unlimited. Scans spend credits. See the pricing page for the credit allowance in each tier.
No. They are ranges published by vendors and marketplaces, summarised from public pages. Prices change, so confirm with the vendor before you buy.
Know what you would pay. Before you scan.
Read the plans and credit rules on the pricing page, or see what a scan finds.