Continuous AI pentesting. Honest pricing.

KAI Platform is our continuous AI-driven testing product — 24/7 autonomous scanning, billed as a published subscription. KAOS Services are expert-led, scope-by-scope engagements (audits, pentests, red team operations, advisory) delivered by our human offensive security team — pricing is custom per engagement after a scoping call. Most customers run both: Platform for everyday coverage, Services for compliance milestones and deep-dive validation.

Yes. You can upgrade or downgrade your platform tier at any time. Upgrades prorate immediately; downgrades take effect at the start of your next billing cycle. No early-termination fees.

Yes — 14-day free trial on STARTER and PRO with full feature access. No credit card required to start.

STARTER if you have a single product and up to 10 internet-facing assets — usual fit for SMBs and pre-Series-B startups. PRO is the default for mid-market and any team that needs SAML SSO, full integrations, compliance evidence packs and 4h support — covers up to 50 assets. ENTERPRISE when you need on-prem, air-gapped, BYOK encryption, custom techniques, audit-log streaming, or you're past 50 assets. You can move up at any time, prorated.

As many as the queue can run. KAI uses one dedicated worker per tenant, so scans run sequentially. A typical Quick Scan finishes in 30–90 minutes; Deep Scans on internal estates can take several hours. In practice this means a 10-asset estate on STARTER can comfortably run weekly cycles plus on-demand re-tests; 50-asset estates on PRO usually settle into a daily rotation. If you outgrow the queue (e.g. 24/7 continuous on 100+ assets), Enterprise unlocks additional concurrent workers on request.

An asset is a host, application, API, container cluster or cloud account that you put under continuous testing. A multi-domain web application running across staging and production counts as one asset. Internal AD environments count per forest. We don't charge per finding, per scan or per user — only the asset cap matters.

Platform subscriptions are refundable pro-rata within the first 30 days, no questions asked. Service engagements (audits, red team, advisory) follow the cancellation terms agreed in your statement of work — typically refundable up to scoping completion, then prorated against work delivered.

It happens — and that's actually a good outcome. KAI's job is to find what's there, not to invent issues. If your estate is well-defended you may go through scan cycles with few or no findings; the platform still delivers value through continuous monitoring, MITRE coverage tracking, compliance evidence, and a clear audit trail you can show auditors. We don't tie pricing to a finding count for either side.

Yes. Registered non-profits, early-stage startups (pre-Series A) and accredited universities are eligible for up to 40% off platform pricing. Contact sales with proof of status to apply.

Yes. We sign GDPR-compliant Data Processing Agreements (DPA) with every EU customer by default, HIPAA Business Associate Agreements (BAA) for healthcare clients, and mutual NDAs prior to any scoping call. Standard templates are available; custom redlines welcome on Enterprise.

All scan data, findings, and customer artifacts are stored in EU data centers (Frankfurt and Madrid regions) with end-to-end encryption at rest and in transit. We never move data outside the EU without explicit written authorization. SOC 2 Type II and ISO 27001 audited.

Credit card and SEPA bank transfer for self-serve plans. Enterprise contracts support invoicing (NET-30/NET-60), POs, and multi-year prepayment with up to 20% discount.

Yes — save 20% when you choose annual billing on any recurring plan. Multi-year terms unlock additional savings (contact sales).