Our pricing is public. Theirs isn’t.
- Products
- Two. Defend, or defend and validate.
- Scale
- 1,000 assets, or unlimited.
- Runs on
- Your hardware. No cloud, no per-seat fees.
- To see a price
- Scroll. That’s it.
CVEasy
Every signal you already have: scanner findings, NVD, EPSS, CISA KEV, threat intel, your own asset context. Correlated through twelve layers into one score you can act on.
CVEasy
- Full CTEM core: discover, prioritize, remediate, report
- TRIS™ 12-layer risk prioritization
- Scanner connectors with automatic ingest
- Fix First remediation with step-by-step guidance
- Ticketing hand-off to Jira, ServiceNow, and GitHub
- Compliance and executive reporting
- Runs entirely on your hardware
CVEasy Enterprise
- Everything in CVEasy, at estate scale:
- No asset cap, score the entire environment
- Priority support
Defend covers discover → prioritize → remediate → report. Want proof it’s exploitable? Keep scrolling.
CVEasy Red
Everything in CVEasy, plus BASzy™ runs the attack for real: web and network simulation, multi-step chains, custom payloads. Then it re-tests after the fix to prove the door is closed.
CVEasy Red
- Everything in CVEasy, plus BASzy™ attack validation:
- Web and network attack simulation
- Spotlight assessments and multi-step chains
- Custom payloads
- Post-fix validation that proves the fix worked
CVEasy Red Enterprise
- The full platform, no limits:
- Everything in CVEasy Red
- No asset cap, validate the entire estate
- Priority support
Checkout via Stripe · keys delivered by email within 48 business hours · cancel anytime · refund & cancellation policy
The 1,000-asset math
What a year of exposure management costs for a 1,000-asset estate. Incumbents charge $15K–$30K per year for overlapping capability across scanner, prioritization, and validation tools.
Bars share one scale from $0. Incumbent range reflects typical annual pricing for comparable enterprise coverage; your renewal quote may vary.
Every number, side by side
The product is the tier. What you buy is what ships. There is nothing to unlock later.
| CVEasy | CVEasy RedMost popular | CVEasy Enterprise | CVEasy Red Enterprise | |
|---|---|---|---|---|
| Annual | $7,450 | $14,900 | $34,650 | $49,500 |
| Monthly | $745 | $1,490 | $3,465 | $4,950 |
| Included assets | 1,000 | 1,000 | Unlimited | Unlimited |
| CTEM core: ingest, TRIS scoring, remediation, reporting | ✓ | ✓ | ✓ | ✓ |
| BASzy™ attack validation | — | ✓ | — | ✓ |
| Post-fix validation | — | ✓ | — | ✓ |
| Priority support | — | — | ✓ | ✓ |
How buying works
Self-serve checkout, or talk to us first. Both roads end at the same license key.
Pick your product
Defend or defend + validate; 1,000 assets or unlimited. Not sure? Request a demo and we’ll scope it with you.
Check out with Stripe
Card details go to Stripe, never to us. Monthly or annual, with two months free on annual.
Delivered by email
Your license key and a single-use installer link arrive within 48 business hours, usually much sooner. Activate and start scoring.
Questions
What counts as an asset?
A distinct IP-routable target that CVEasy has ingested within the last 30 days. Assets not seen for 30 days deactivate automatically and stop counting, so decommissioned hosts never linger on your bill.
How does renewal work?
Monthly plans renew monthly, annual plans renew annually, and we email you before every renewal. Cancel any time with effect from the end of the current term. Details are in the Refund & Cancellation Policy.
What if I outgrow 1,000 assets?
Nothing breaks. There is built-in headroom for scan-time drift. When you genuinely outgrow it, upgrading to an Enterprise product is a same-day conversation.
Does my data go to your cloud?
No. The application, database, analysis engine, and AI model all run on your machine. There is no upload path for scan results, findings, or reports. See the Trust Center.
Government & Defense
Dedicated builds including fully air-gapped operation for federal civilian, DoD, and the defense industrial base. Priced per engagement.
Contact us