AI pentest pricing and plans
Every plan includes an AI security engineer. Choose the team size and monthly credits that fit your needs.
Monthly billing.
New to pen testing? See how automated testing works for small businesses.
Related: who we are and pen testing guides.
How much does BreachLine cost?
BreachLine plans start at £399 a month for Individual, with 400 credits. Team is £899 a month with 1,000 credits, and Business is £2,299 a month with 2,800 credits. Each plan includes Nebula, an AI security testing engineer. Testing and retests use credits. Enterprise: £199 per seat per month (minimum five seats), credits billed separately.
Individual
Your own AI security engineer
Billed monthly
400 credits
Shared monthly usage allowance
- Web, API, network and cloud testing using your credits
- Investigations and retests draw from the same allowance
- Credit roll-over, one month
- Continue with prepaid credits when your allowance runs out
- Support by email
Team
PopularA shared engineer for a small team
Billed monthly
1,000 credits
Shared monthly usage allowance
- Web, API, network and cloud testing using shared credits
- Invite your team with workspace access permissions
- Credit roll-over, one month
- Continue with prepaid credits when your allowance runs out
- Support by email
Business
Full attack surface for a growing org
Billed monthly
2,800 credits
Shared monthly usage allowance
- Web, API, network and cloud testing using shared credits
- Invite your team with workspace access permissions
- Credit roll-over, one month
- Continue with prepaid credits when your allowance runs out
- Support by email
Enterprise
Per-seat access, with credits billed separately
per seat per month (minimum five seats)
Credits billed separately
- Applications, network, cloud and mobile use your credits
- Credit roll-over, one month
- Additional AI staff at £549/month
- Enterprise: £199 per seat per month
What comes as standard.
The same security tools on every plan. AI work uses credits: your monthly allowance, then prepaid credits. On Enterprise, credits are billed separately.
Findings are validated
Findings are validated, with evidence and reproduction steps.
Retest your fixes
Ask your engineer to verify a fix. Retests use credits, like other AI work.
Reports and evidence exports
AI-written reports and questionnaire answers use credits.
OWASP, MITRE ATT&CK, CVSS
Findings mapped to OWASP, MITRE ATT&CK and scored with CVSS.
Nebula engine, on every plan
The same autonomous Nebula engine powers testing at every tier.
Talk to Nebula over a call
Speak to your AI security engineer on a call to scope tests, ask questions or walk through findings.
On demand or on a schedule
Run a test when you ship, or set Nebula to retest on a schedule you choose.
Human sign-off on request
Want an engineer to review findings? Ask, and we'll sign them off.
How do credits work?
| Feature | Individual | Team | Business | Enterprise |
|---|---|---|---|---|
Allowance | ||||
| Credits included | 400 | 1,000 | 2,800 | Credits billed separately |
| Token usage | Metered usage | Metered usage | Metered usage | Metered usage |
| After your allowance | Prepaid credits | Prepaid credits | Prepaid credits | Credits billed separately |
| Credit roll-over | 1 month | 1 month | 1 month | 1 month |
Team and staff | ||||
| AI staff members included | 1 | 1 | 1 | 1 |
| Additional AI staff member | £549/month | £549/month | £549/month | £549/month |
| Named seats | 1 | 3 | 10 | Per seat, minimum 5 |
Attack surface | ||||
| Web and API testing | Uses credits | Uses credits | Uses credits | Uses credits |
| Network and cloud testing | Uses credits | Uses credits | Uses credits | Uses credits |
| Mobile testing on supported connected devices | Uses credits | Uses credits | Uses credits | Uses credits |
| Alert investigation | Uses credits | Uses credits | Uses credits | Uses credits |
Included on every plan | ||||
| Findings are validated, with evidence and reproduction steps. | ||||
| Retests after a fix | Uses credits | Uses credits | Uses credits | Uses credits |
| AI-written reports and questionnaire answers | Uses credits | Uses credits | Uses credits | Uses credits |
| OWASP, MITRE ATT&CK and CVSS output | ||||
Support | ||||
| Support channel | ||||
Add-ons and Proof engagements
Buy what you need, when you need it.
Additional AI staff member
£549 / month
A second AI staff member on your account.
Credit top-ups
£500 · £1,900 · £4,500
Top up your allowance any time on Individual, Team and Business: 500 credits for £500, 2,000 for £1,900, or 5,000 for £4,500. Enterprise credits are billed separately.
Proof engagement
£2,500 · £5,000
A point-in-time deep engagement on one asset: £2,500 for a single pass, £5,000 in depth.
Which plan fits a small test?
A small test of one or two assets, such as a website and its API, usually fits the £399 Individual plan. If several people need access, Team includes three named seats and Business includes ten. Unused credits roll over for one month, and you can top up at any time.
How do credits work?
Credits pay for AI work: testing, investigations, retests, AI-written reports and questionnaire answers. Individual, Team and Business include a monthly allowance shared by your organisation. When it runs out, buy prepaid top-ups: 500 credits for £500, 2,000 for £1,900 or 5,000 for £4,500. Exporting existing findings uses no credits. Your workspace usage page shows what each piece of work used. The number of credits a test uses depends on its size and depth, so a larger application or a deeper investigation uses more.
Do retests use credits?
Yes. When you fix an issue, ask Nebula to verify the fix and it retests. Retests use credits, like other AI work. Findings are validated, with evidence and reproduction steps, so you can see what was found and confirm it is fixed.
How does Enterprise pricing work?
Enterprise: £199 per seat per month (minimum five seats), credits billed separately. Additional AI staff members are £549 a month on any plan, each with its own email address. There is no self-serve free trial, but you can book a 30-minute demo on your own assets.
How does this compare to a manual pen test?
Where a contract, insurer or tender requires an accredited report, you will still need one. See our penetration testing cost guide, the Nebula vs Intruder comparison and penetration testing in London.