Simple. Transparent. No surprises.

Yes — every plan starts with a 7-day free trial. You will not be charged until day 8. If you cancel before then, you will never be billed. A payment method is required at signup so your subscription can activate automatically at the end of the trial.

During your 7-day trial you get access to all four tools — one web/domain scan, one risk assessment, one internal penetration test, and one external penetration test. That gives you a complete picture of your security posture — enough to know exactly what you are paying for when the trial converts.

Every subscription includes access to all four BreachBrain tools: Web/Domain Scanner (automated scan of your public-facing infrastructure), Risk Assessment (guided questionnaire across 8 security domains — Access Control, Incident Response, Asset Management, Data Protection, Vendor Risk, Network Security, Compliance, and Physical Security — with AI-powered analysis), Internal Penetration Test (simulates an insider threat or compromised endpoint), and External Penetration Test (simulates an outside attacker targeting your internet-facing systems). Every report includes AI analysis, certified analyst review, a prioritized risk score, and a PDF delivered within 24 hours.

All three plans include the full BreachBrain assessment platform and analyst-verified reports. Standard Plan allows 1 test per tool per month. Pro Plan allows 10 tests per tool per month. Enterprise is unlimited across all tools and adds user management, role-based access control, a team reporting dashboard, and dedicated account support — pricing available on request.

Annual billing charges the full year upfront at a discount of 20%. Same access as monthly, billed once per year.

Your risk score (0–100, lower is better) is computed from a weighted combination of your questionnaire responses, external scan findings, and breach exposure data. Severity weights are applied so a Critical finding has significantly more impact than a Low one. The methodology is explained in your full report.

A certified cybersecurity analyst reviews every report before it is released. This is not optional and is not outsourced. The analyst validates severity rankings, removes false positives, and approves the final document.

Yes. Cancel monthly subscriptions anytime — no renewal on the next billing date. Annual subscriptions won't auto-renew at year end.

All of them. Our methodology is calibrated for small and mid-size organizations, with specific experience in healthcare, legal, accounting, construction, retail, and technology.

Yes. All data is encrypted at rest and in transit. We don't sell or share it. Infrastructure is hosted on AWS.

If your report has not yet been delivered, we will issue a full refund upon request. Once a report has been delivered and reviewed by a human analyst, refunds are evaluated on a case-by-case basis. Contact us at support@breachbrain.com with any concerns.

Yes. For larger portfolios, MSP arrangements, or dedicated support, contact us directly at support@breachbrain.com or through the contact page.