# How much does attack surface management cost?

> Attack surface management costs from a few tens of dollars a month for lightweight tools to five figures a year for enterprise platforms, depending on how the vendor counts assets.

Canonical page: https://www.edgeprotect.io/guides/attack-surface-management-pricing
Last updated 29 October 2026.

## How do vendors charge?

The unit a vendor counts decides your bill. Ask what counts as an asset before you compare prices.

Attack surface management pricing models (details summarised from public pages; confirm with each vendor.)

| Model | What you pay for | Published range | Watch for |
|---|---|---|---|
| Per asset | Each domain, host, address or application the tool tracks | An AWS Marketplace listing shows $12,000 a year for 250 application assets; an enterprise vendor listing shows $30,000 a year for 250 assets | Definitions of "asset" differ. Cost grows with every subdomain you add. |
| Per credit | A pool of credits spent on scans and other actions | Varies by vendor | Credits that expire each period. Cost follows how often you scan, not how much you own. |
| Per seat | Each person who logs in | Varies by vendor | Extra cost for auditors, managers and service providers who need to view results. |
| Flat tier | A fixed price for a band of use | About $25 to $200 a month for lightweight tools | Limits on domains, scans or features that push you to the next tier. |

Ranges are as published by the vendors and marketplaces named, in US dollars. They change.

## What does that mean for 100 or 250 assets?

These figures divide the published listings above by their asset counts. Vendors rarely scale prices in a straight line, so treat them as a guide.

Illustrative yearly cost by number of assets (illustration, not a quote)

| Pricing basis | Per asset per year | 100 assets | 250 assets |
|---|---|---|---|
| Marketplace listing at $12,000 for 250 assets | $48 | $4,800 | $12,000 |
| Enterprise listing at $30,000 for 250 assets | $120 | $12,000 | $30,000 |
| Lightweight flat tier at $25 to $200 a month | Not per asset | $300 to $2,400 | $300 to $2,400, if the tier allows it |

A flat tier often has a cap on domains or scans. Check that your assets fit inside it.

## What does EdgeProtect cost?

EdgeProtect charges by credit, not by asset or seat. Team members are unlimited. Prices below are in GBP as published on the pricing page, which is the source of truth.

EdgeProtect tiers (GBP, as published)

| Tier | Monthly | Credits each month | Annual |
|---|---|---|---|
| Basic | £299 | 800 | £3,499, with bonus credits |
| Business | £899 | 2,500 | £9,999, with bonus credits |
| Enterprise | £2,499 | 10,000 | £24,999, with bonus credits |

Scans spend credits, so cost follows how often you scan. Scans do not repeat by themselves; you start one when something changes. We have not converted these prices to dollars.

## Questions

### How much does attack surface management software cost?

Lightweight tools are published at about $25 to $200 a month. Marketplace listings for 250 application assets are published at about $12,000 to $30,000 a year. The spread comes from how each vendor counts assets and what the tool does.

### What is the cheapest way to pay for attack surface management?

A flat tier is usually cheapest for a small estate, provided your domains and scans fit its limits. Per-asset pricing is cheapest when you have few assets and rarely add more.

### What counts as an asset?

It depends on the vendor. It can be a domain, a subdomain, a host, an IP address or an application. Ask for the definition in writing, because it decides your bill.

### Does EdgeProtect charge per asset?

No. EdgeProtect charges by credit, and team members are unlimited. Scans spend credits. See the pricing page for the credit allowance in each tier.

### Are the prices in this guide exact?

No. They are ranges published by vendors and marketplaces, summarised from public pages. Prices change, so confirm with the vendor before you buy.

## Know what you would pay. Before you scan.

Read the plans and credit rules on the pricing page, or see what a scan finds.

## Related

- [Pricing](https://www.edgeprotect.io/pricing)
- [Attack surface management](https://www.edgeprotect.io/features/attack-surface-management)