Simple pricing. Real value.
Choose the plan that fits your needs.
From a single firewall analysis to enterprise-scale environments, ConfigProof gives you the tools to analyze, validate and prove your security posture.
- No long-term contractsStay flexible.
- The same analysis engineAcross every paid plan.
- Support from engineersWhen you need it.
Plan comparison
Free Preview
See what ConfigProof produces, on a limited analysis.
$0per month
- 1 configuration upload
- Basic inventory and detected modules
- Top 3 findings
- Preliminary coverage and score
- 24-hour access
- No credit card required
No final report, WBS export or diagram export.
Try it freeSingle Assessment
A one-time analysis for a single firewall.
$79one time
- 1 Assessment Cycle
- All supported analysis modules
- Complete findings and evidence
- Professional Assessment PDF report
- Basic WBS and network diagram
- One validation upload within 30 days
- 60 days of project access
Engineer
For an individual security engineer.
$49per month
$39 per month billed annually
- 5 Assessment Cycles per month
- All supported analysis modules
- Up to 25 saved firewalls
- Both report templates
- Full WBS and editable diagrams
- 180 days of history
- Email support
- Most popular
Consultant
For consultants and independent professionals.
$149per month
$119 per month billed annually
- 25 Assessment Cycles per month
- All supported analysis modules
- Multiple clients and projects
- White-label reports and saved brand profile
- Full WBS handoff and diagram insertion
- 1 year of history
- Priority support
MSP
Early accessFor managed service providers.
$399per month
$319 per month billed annually
- 100 Assessment Cycles per month
- 5 users included, with roles
- Shared client workspaces
- White-label and organization templates
- Audit history across the organization
- 2 years of history
- Priority support
Enterprise
For large organizations with custom requirements.
Custom
- Custom Assessment Cycle volume
- Custom user count and contract entitlements
- Custom retention
- Dedicated support and onboarding
Contact salesOn the roadmap, not available today
- SSO, SAML and OIDC
- Public API access
- On-premises or private deployment
- Custom compliance packs
Plan comparison
What is included in each plan.
| Feature | Free Preview | Single Assessment | Engineer | Consultant | MSP | Enterprise |
|---|---|---|---|---|---|---|
| Assessment Cycles per month | 1 preview | 1 | 5 | 25 | 100 | Custom |
| Users | 1 | 1 | 1 | 1 | 5 | Multiple |
| All supported analysis modules | Not included | Included | Included | Included | Included | Included |
| Professional PDF report | Not included | Included | Included | Included | Included | Included |
| Both report templates | Not included | Not included | Included | Included | Included | Included |
| WBS and network diagram | Not included | Included | Included | Included | Included | Included |
| Client management | Not included | Not included | Not included | Included | Included | Included |
| White-label reports | Not included | Not included | Not included | Included | Included | Included |
| Public API access | Not included | Not included | Not included | Not included | Not included | Coming later |
| Data retention | 24 hours | 60 days | 180 days | 1 year | 2 years | Custom |
| Priority support | Not included | Not included | Not included | Included | Included | Included |
Need something custom?
Talk to us about volume, contract entitlements or an environment that does not fit a listed plan.
- Custom cycle volume and retention
- Contract entitlements and invoicing
- Dedicated support and onboarding
What counts as usage
Usage is measured in Assessment Cycles, and a cycle is a workflow, not a button press.
One Assessment Cycle is one logical firewall environment, one primary configuration snapshot, and the complete workflow around that snapshot.
Does not consume another cycle
- Running additional modules against the same snapshot
- Regenerating a report
- Publishing a new report revision of the same assessment
- Changing a finding status, severity or client-facing text
- Editing the WBS plan
- Editing the diagram
- One plan-included validation upload inside the allowed window
Consumes a cycle
- A new logical firewall environment
- A new primary configuration snapshot for an existing firewall
- Effective analysis of each managed firewall in a Panorama bundle
A high availability pair generally counts as one logical environment when it represents the same effective policy. A Panorama management-model assessment counts as one cycle.
About limits Plan limits are published numbers, not the word unlimited. Where a plan is generous, fair-use language and technical protections against abuse, repeated identical uploads and automated reselling apply.
Pricing questions
- What happens when I run out of Assessment Cycles?
- Existing assessments, reports, plans and diagrams stay available for your retention period, and you can keep editing them. Starting a new environment or uploading a new primary snapshot waits for the next period or a plan change.
- Can I add a colleague to the Engineer or Consultant plan?
- No. Free Preview, Single Assessment, Engineer and Consultant are single-user accounts, and the service refuses a second member rather than hiding the button. Multi-user starts at MSP.
- Is there a trial?
- The Free Preview is the trial. It needs no card and shows the inventory, the detected modules, a preliminary coverage figure, the top three findings and one complete evidence view.
- What is a validation upload?
- After remediation you upload the configuration again to confirm the findings you fixed are gone. Plans that include one make it free inside the stated window.
- Do you support anything other than Palo Alto Networks?
- Not today. The Phase 1 adapter covers PAN-OS and Panorama from an XML configuration export. Additional vendors are roadmap, and the product will never silently accept a file it cannot analyze.
- How do I cancel?
- From your billing settings, at any time. Your data stays available for the retention period on the plan you were on, and you can delete it sooner.
Supported today Palo Alto Networks PAN-OS and Panorama, from an XML configuration export. On the roadmap Additional vendors, live collection and continuous monitoring are not available today. Learn more