Pricing
No per seat, per project
or SaaS nonsense.
A fixed quote for every engagement, agreed before we start. Team of 5 or team of 500, a licence costs the same, and the annual licence comes with a free manual pentest.
| Compare | Most asked forSecurity testingFixed quoteper engagement, after a free call | Free pentest includedAnnual licenceOne yearly priceper instance, quoted | No SaaS, own itPerpetual licencePay onceself-hosted, yours to keep |
|---|---|---|---|
| Who tests | Samyam Ray, by hand, with the agent running the checklist | The AI agent all year, plus a manual pentest | You, with the AI agent |
| Manual penetration test | Yes, scoped to what you need | Yes, free: one manual pentest per licence year, on one web or mobile app | Not included, bought separately |
| Business logic and chained attacks | Yes, a human tests intent | Yes, in the included manual test | Agent-led, limits stated |
| How often | Per engagement, retest included | Unlimited scans during the year | Unlimited scans, every release |
| Users and projects | Scoped per engagement | Unlimited | Unlimited |
| Red teaming and social engineering | Yes, on request | No | No |
| For auditors | Reports your ISO 27001 or SOC 2 auditor can use as evidence | Reports your ISO 27001 or SOC 2 auditor can use as evidence | Your own testing evidence |
| Updates and support | Direct line to your tester | Yes, every release and priority support | 12 months of updates, renewal optional. Email support for the first 12 months, with replies within two business days |
| Best for | A customer, an audit or a risky release | Continuous testing and a yearly pentest in one purchase | Owning it outright |
| Choose | Scope a test | Start annual | Own it |
- Who tests
- Samyam Ray, by hand, with the agent running the checklist
- Manual penetration test
- Yes, scoped to what you need
- Business logic and chained attacks
- Yes, a human tests intent
- How often
- Per engagement, retest included
- Users and projects
- Scoped per engagement
- Red teaming and social engineering
- Yes, on request
- For auditors
- Reports your ISO 27001 or SOC 2 auditor can use as evidence
- Updates and support
- Direct line to your tester
- Best for
- A customer, an audit or a risky release
- Who tests
- The AI agent all year, plus a manual pentest
- Manual penetration test
- Yes, free: one manual pentest per licence year, on one web or mobile app
- Business logic and chained attacks
- Yes, in the included manual test
- How often
- Unlimited scans during the year
- Users and projects
- Unlimited
- Red teaming and social engineering
- No
- For auditors
- Reports your ISO 27001 or SOC 2 auditor can use as evidence
- Updates and support
- Yes, every release and priority support
- Best for
- Continuous testing and a yearly pentest in one purchase
- Who tests
- You, with the AI agent
- Manual penetration test
- Not included, bought separately
- Business logic and chained attacks
- Agent-led, limits stated
- How often
- Unlimited scans, every release
- Users and projects
- Unlimited
- Red teaming and social engineering
- No
- For auditors
- Your own testing evidence
- Updates and support
- 12 months of updates, renewal optional. Email support for the first 12 months, with replies within two business days
- Best for
- Owning it outright
The smart way: run the agent every release, and book a hands-on pentest when it matters.
Quotes exclude applicable taxes. We reply within one business day.
Every licence includes
- All eight kinds of testingPenetration testing, SAST, DAST, cloud, containers, vulnerability assessment, SCA and signed SBOMs.
- The whole registerTriage, SLAs, Threat Advisor, reports, share links, webhooks, API and CI gate.
- Enterprise sign-inSSO through OIDC or SAML, MFA, custom roles and an audit log.
- Your infrastructureInstall online or air-gapped. Updates only when you choose to apply them.
Why it costs less
Why is Cerberon so affordable?
SaaS security tools charge for their cloud, their AI and every seat you add. Cerberon runs on your infrastructure, so none of those costs exist for us to pass on. Our pentests cost less for a different reason: our agent does the slow part.
- You bring the server.Your scans run on your hardware, not ours. We have no hosting, compute or storage bill to put in your price.
- You bring the AI key.Use your own AI provider or a model you host, billed to you at their price. We add no AI markup. Or run without AI at all.
- No seat tax.One price per instance with unlimited users and projects. Growing your team never grows your bill.
- Pentests without padded days.Our agent runs the recon, enumeration and checklist work that fills days of a typical test. Testing hours go on the issues that matter, and we pass the time saved on to you.
Free scan
Get your first scan free.
Your first scan is free: one web app or API, one mobile app, or up to 5 public IP addresses, with a full report. One per company. See real findings from your own systems before you spend anything.
One free scan and one report per company.
- Tell us what to scanPick one web app or API, one mobile app, or up to 5 public IP addresses, and send it through the contact form.
- Sign the authorisationA person authorised to approve testing signs our letter of authorisation, with proof you own the target.
- Get your reportWe run the scan and send you the full report.
Pricing questions
Why don't you publish prices?
Because a fair price depends on the scope. Two web apps can differ by ten user roles and a hundred API endpoints. A free 30-minute call gets you a fixed quote, usually the same week, so you never pay for days you did not need.
How is a penetration test priced?
By the number of targets, user roles and endpoints, the testing window and the reporting you need. The quote is fixed, includes a retest of fixed findings, and does not grow with the job.
Do you offer partner rates?
Yes. Compliance firms, vCISOs and security consultancies that send regular work get partner rates and can have reports under their own brand. See how partnering works.
Is the platform priced per user or per project?
No. A licence covers one production instance with unlimited users, projects and scans. A team of 5 and a team of 500 pay the same.
What does the annual licence include?
Every capability, every feature update as it ships, priority support for the year, and one manual pentest per licence year, on one web or mobile app. There is no automatic renewal charge.
What is the perpetual licence?
A one-time purchase of a self-hosted licence. Your licensed version keeps working with every capability, forever, online or air-gapped. It includes 12 months of updates and email support for the first 12 months, with replies within two business days. After that, an optional yearly renewal adds new releases, rule updates and support, and skipping it stops nothing.
Why is Cerberon priced lower than SaaS security tools?
Because it runs on your infrastructure. SaaS tools charge for their cloud compute and storage, mark up the AI they run for you, and charge per seat. With Cerberon you bring the server and your own AI key or model, so there is no hosting bill, no AI markup and no seat count to pay for.
What happens if an annual licence is not renewed?
The instance becomes read-only after a short grace period, so your findings and reports stay readable. Renewing restores everything, including updates and priority support.
Can I run more than one instance?
Each licence covers one production instance. Extra instances, such as a second region or an air-gapped copy, are quoted separately.
Do quotes include tax?
No. Quotes exclude applicable taxes. We bill in rupees in India and in dollars outside India.
Is there a free trial?
We offer a free scan instead. Your first scan is free: one web app or API, one mobile app, or up to 5 public IP addresses, with a full report. One per company. A person authorised to approve testing signs a letter of authorisation before we start. How the free scan works.
Get a quote this week.
Tell us the targets, the deadline and who is asking for the report. We scope the smallest engagement that answers it.