Pricing

Price the scope. Not the problems.

Simple plans based on the public assets you explicitly authorize Hagon to assess and monitor. Discovery does not increase your bill, and finding more problems never costs you more.

Controlled-beta plans

One product. Three levels of coverage.

Every plan includes the full Hagon lifecycle. Plans change how much authorized public infrastructure Hagon covers, not what the product can do.

Starter

$249 / month

Up to 10 authorized public assets

For small organizations and focused external footprints.

Request access

Growth

$499 / month

Up to 50 authorized public assets

For growing organizations with a broader external footprint.

Request access

Scale

$999 / month

Up to 150 authorized public assets

For organizations managing a larger public attack surface.

Request access

Included at every tier

Discover, validate, prioritize, remediate, verify, monitor, security activity, and customer notifications.

Larger environments

More than 150 authorized public assets?

We will work with you on scope and pricing without changing the underlying Hagon experience.

Discuss your environment

Discovery is included

Start with your primary domain. Hagon can discover additional internet-facing infrastructure without turning every observation into a billable asset.

You authorize the scope

Commercial scope is based on public assets you explicitly bring into authorized coverage. Discovery alone does not expand your paid scope or grant Hagon permission to interact with an asset.

Findings do not change the price

Whether Hagon validates one issue or twenty, the price stays tied to your authorized asset tier. There is no per-finding incentive.

Monitoring is part of the lifecycle

Validation, findings, remediation guidance, revalidation, continuous monitoring, security activity, and customer notifications are part of the Hagon experience at every tier.

Same product. Different scope.

Coverage changes. Capability does not.

Every plan receives the same standard of discovery, evidence-first validation, remediation guidance, revalidation, continuous monitoring, and customer notification. If expanding authorized scope would move you into another plan, we make that clear before the commercial scope changes.

Authority stays separate

Payment never grants testing permission.

Commercial access and testing authorization remain separate. Paying for Hagon never automatically authorizes Hagon to interact with infrastructure.

Controlled beta

Ready to get started?

Tell us about your public footprint and we will help determine the right starting scope.

Request access