ScanMySaaS

Simple monthly plans

Pay for scans, not security theater.

Start with a free scan and one actionable fix when an issue is found. Upgrade for guidance across the report and credits to check each release.

Existing subscriber prices stay unchanged

Free

Find an issue and try one practical fix.

$0once

1 scan credit

Rollover: —

  • Up to 25 pages
  • 60+ automated checks
  • Security score
  • Prioritized findings
  • One actionable fix, when found
  • One free rescan to verify your fix
  • Public GitHub repository scans

Pro

For teams checking multiple apps and environments.

$79per month

30 credits / month

Rollover: Up to 60

  • Everything in Starter
  • 30 monthly credits
  • Private GitHub repository scans (read-only)
  • Background scans saved to your dashboard
  • Step-by-step remediation
  • Score trends

What changes when you upgrade

Paid plans add AI logic review of selected repository files, alongside remediation and repeat checks.

CapabilityFreeStarterPro
Monthly credits1 once1030
Pages per scan252525
Finding descriptions
Step-by-step remediationOne findingAll findingsAll findings
Saved scan history
Free verification rescanWithin 7 daysUses creditsUses credits
Public GitHub repository scans
Private GitHub repository scans
AI logic reviewMonthly token limitHigher monthly token limit
Credit rollover20 max60 max
scanmysaas.com/repo-scan/…Sample report
Connected GitHub App repository picker filtered to the public securitybusiness repository, with AI review enabled; private repository names are excluded.
Starter and Pro: connect the read-only GitHub App and choose a private repository.
scanmysaas.com/repo-scan/…Sample report
AI finding marked Needs verification and high confidence, with a file and line, explanation and code evidence; private repository identity is outside the crop.
Starter and Pro: AI findings include code evidence and still need verification. Excerpt from a real scan.

Priority is a starting point for verification

  1. Critical

    Verify potentially severe exposure first.

  2. High

    Review substantial access or data risks next.

  3. Medium

    Assess context and missing protections.

  4. Low

    Address lower-impact weaknesses.

Critical: verify potentially severe exposure first. High: review substantial access or data risks next. Medium: assess context and hardening gaps. Low: address lower-impact weaknesses. Severity is not proof of exploitability.

Pricing FAQ

No fine print.

How much does vulnerability scanning cost?

ScanMySaaS starts free: one website scan with a prioritized report and one actionable fix, plus free public GitHub repository scans. Starter is $29 per month with 10 website scan credits, and Pro is $79 per month with 30 credits. Both include private repository scans, remediation for every finding and the AI logic review of repository code.

Is there a free vulnerability scanner?

Yes. The first website vulnerability scan is free with no credit card, and public GitHub repositories can be scanned for free at any time.

What counts as a scan credit?

One credit runs a new crawl and security report for one website. A scan can cover up to 25 reachable pages on that site.

Do unused credits roll over?

Yes. Starter can hold up to 20 credits and Pro can hold up to 60. New monthly credits are added up to that cap.

Why pay if the first report is free?

The free report shows the score, affected URLs, severity, and descriptions, plus one prioritized fix when an actionable finding is available. Paid plans unlock remediation for the remaining findings and give you credits to verify fixes over time.

How does private repository access work?

You install the ScanMySaaS GitHub App on the repositories you choose. It can only read repository contents and metadata. Files are read in memory for the scan and discarded; only the report is saved, and it is visible only to your account. You can revoke access on GitHub at any time.

How does AI logic review handle my code?

On Starter and Pro, selected source files are sent to OpenAI for analysis using store: false. AI findings need verification. You can opt out in your dashboard; rule-based scans still run. Input and monthly token budgets apply, with a higher monthly budget on Pro. If AI is unavailable or the budget is exhausted, your rule-based report still completes.

Can I change or cancel my plan?

Yes. Subscribers can open the Stripe billing portal from the dashboard to manage or cancel billing.

Is the result a security certification?

No. It is an automated outside-in assessment, not a certification or penetration test. Use it as a fast feedback layer in a broader security process.