Skip to content
ConfigProof

A clear plan for every stage of the work

Start with one device, then scale across clients and teams. Every plan uses the same analysis engine and keeps the evidence attached

  • No long-term contractsStay flexible
  • The same analysis engineAcross every paid plan
  • Support from engineersWhen you need it

Plan comparison

Swipe to explore all six plans

  • Free Preview

    One complete analysis of one device, at no cost

    $0once

    • File upload
    • 1 Assessment Cycle, once
    • All supported analysis modules
    • Complete findings and evidence
    • Full WBS and editable diagrams
    • 30 days of project access
    Try it free

  • Single Assessment

    A one-time analysis of a single device

    $79one time

    • File upload
    • Collector
    • 1 Assessment Cycle
    • All supported analysis modules
    • Complete findings and evidence
    • Professional Assessment PDF report
    • Basic WBS and network diagram
    • One validation upload within 30 days
    • 60 days of project access
    • The Collector, run on your own machine
    Get started

  • Engineer

    For an individual security engineer

    $49per month

    $39 per month billed annually

    • File upload
    • Collector
    • 5 Assessment Cycles a month
    • All supported analysis modules
    • Up to 25 saved devices
    • Both report templates
    • Full WBS and editable diagrams
    • One validation upload within 30 days
    • 180 days of history
    • Email support
    • The Collector, run on your own machine
    Get started

  • Consultant

    For consultants and independent professionals

    $149per month

    $119 per month billed annually

    • File upload
    • Collector
    • 25 Assessment Cycles a month
    • All supported analysis modules
    • Multiple clients and projects
    • White-label reports and saved brand profile
    • Full WBS handoff and diagram insertion
    • One validation upload within 30 days
    • 1 year of history
    • Priority support
    • The Collector, run on your own machine
    Get started

  • MSP

    For managed service providers

    $399per month

    $319 per month billed annually

    • File upload
    • Collector
    • Relay
    • 50 Assessment Cycles a month
    • 5 users included, with roles
    • Shared client workspaces
    • White-label and organization templates
    • Audit history across the organization
    • One validation upload within 30 days
    • 2 years of history
    • Priority support
    • The Collector, run on your own machine
    • 10 Relay devices included
    • More Relay devices: $15 per device per month
    Get started

  • Enterprise

    For large organizations with custom requirements

    Custom

    • File upload
    • Collector
    • Relay
    • Custom Assessment Cycle volume
    • Custom user count and contract entitlements
    • Custom retention
    • One validation upload within 30 days
    • Dedicated support and onboarding
    • The Collector, run on your own machine
    • Relay devices by contract
    Contact sales

Three ways to read a device

  • File upload

    Export the configuration and drop it in the browser. Nothing is installed.

    Plans: Free PreviewSingle AssessmentEngineerConsultantMSPEnterprise

  • Collector

    A program for Windows, macOS or Linux that connects to the device, reads the configuration and what the file lacks, such as licenses and HA state, and removes passwords and private keys before anything is sent.

    Plans: Single AssessmentEngineerConsultantMSPEnterprise

  • Relay

    $15 per device per month

    A service on a server in the client's network, outbound HTTPS only. It reads on its own at the interval you set and when you press Read now, and its readings never use Assessment Cycles.

    Plans: MSPEnterprise

Plan comparison

What is included in each plan

Assessment Cycles
25 per month
Users
1
Collector
Included
Relay devices
Not included
All supported analysis modules
Included
Professional PDF report
Included
Both report templates
Included
WBS and network diagram
Included
Client management
Included
White-label reports
Included
Data retention
1 year
Priority support
Included
Plan comparison
FeatureFree PreviewSingle AssessmentEngineerConsultantMSPEnterprise
Assessment Cycles1 total1 total5 per month25 per month50 per monthCustom
Users11115Multiple
CollectorNot includedIncludedIncludedIncludedIncludedIncluded
Relay devicesNot includedNot includedNot includedNot included10 includedCustom
All supported analysis modulesIncludedIncludedIncludedIncludedIncludedIncluded
Professional PDF reportNot includedIncludedIncludedIncludedIncludedIncluded
Both report templatesNot includedNot includedIncludedIncludedIncludedIncluded
WBS and network diagramNot includedIncludedIncludedIncludedIncludedIncluded
Client managementNot includedNot includedNot includedIncludedIncludedIncluded
White-label reportsNot includedNot includedNot includedIncludedIncludedIncluded
Data retention30 days60 days180 days1 year2 yearsCustom
Priority supportNot includedNot includedNot includedIncludedIncludedIncluded

Need something custom?

Talk to us about volume, contract entitlements or an environment that does not fit a listed plan.

  • Custom cycle volume and retention
  • Contract entitlements and invoicing
  • Dedicated support and onboarding
Contact sales

What counts as usage

Usage is measured in Assessment Cycles, and a cycle is a workflow, not a button press

One Assessment Cycle is one logical device, one primary configuration snapshot, and the complete workflow around that snapshot. A firewall, a switch, an ISE deployment and a manager each count one.

Does not consume another cycle

  • Running additional modules against the same snapshot
  • Regenerating a report
  • Publishing a new report revision of the same assessment
  • Changing a finding status, severity or client-facing text
  • Editing the WBS plan
  • Editing the diagram
  • One plan-included validation upload inside the allowed window

Consumes a cycle

  • A new logical device
  • A new primary configuration snapshot of a saved device
  • Each managed firewall read through Panorama, Strata Cloud Manager, FMC, cdFMC, FortiManager or Check Point management, and the manager itself
  • A reading delivered by the Collector, like an upload

Each member of an HA pair, stack or cluster counts one. The cost of a manager reading is shown before you confirm.

How each device counts

One count for Assessment Cycles, saved devices and Relay devices

DeviceCounts
Firewall: PAN-OS, FortiGate, Secure Firewall Threat Defense, ASA, Check Point, Meraki MXOne
Manager: Panorama, Strata Cloud Manager, FMC, cdFMC, Security Cloud Control, FortiManager, Check Point management, a Meraki organizationOne
Switch: Catalyst, Nexus, Meraki MSOne
Cisco ISE deploymentOne
Meraki MR access pointsOne for every ten in an organization, rounded up
HA pair, stack or clusterOne per member

A kind of device with no price yet is never charged: the analysis waits and names it. It counts one saved device.

Readings by the Relay never use Assessment Cycles. Uploads and Collector readings do.

Cycle pack. 25 more Assessment Cycles for $99, once. Valid until your plan's cycles reset. Engineer, Consultant and MSP.

About limits Plan limits are published numbers, not the word unlimited. Where a plan is generous, fair-use language and technical protections against abuse, repeated identical uploads and automated reselling apply.

Pricing questions

What happens when I run out of Assessment Cycles?
Existing assessments, reports, plans and diagrams stay available for your retention period, and you can keep editing them. Starting a new environment or uploading a new primary snapshot waits for the next period or a plan change.
Can I add a colleague to the Engineer or Consultant plan?
No. Free Preview, Single Assessment, Engineer and Consultant are single-user accounts, and the service refuses a second member rather than hiding the button. Multi-user starts at MSP.
Is there a trial?
The Free Preview is the trial, and it is one complete analysis rather than a sample. You see every module, every finding and the evidence behind each one, for 30 days. It takes a card, which is never charged, so that one free analysis means one. Reports and exports need a plan.
What is a validation upload?
After remediation you upload the configuration again to confirm the findings you fixed are gone. Plans that include one make it free inside the stated window.
Which devices do you support?
Palo Alto Networks PAN-OS, Panorama, Strata Cloud Manager and Prisma Access; Fortinet FortiGate, FortiManager and FortiManager Cloud; Cisco Secure Firewall Threat Defense with FMC, cdFMC or FDM; Cisco ASA, including multiple-context; Check Point gateways with Security Management Server, Multi-Domain Server or Smart-1 Cloud; Cisco ISE; Cisco Catalyst and Nexus switches (IOS, IOS-XE and NX-OS); Cisco Meraki MX, MS and MR. Other vendors are not available, and the product does not claim a finding it cannot evidence.
How do I cancel?
From your billing settings, at any time. Your data stays available for the retention period on the plan you were on, and you can delete it sooner.
How is the Relay priced?
By device, never by reading. A Relay device is a logical device the Relay delivered a new reading of in the billing period. MSP includes 10 Relay devices, and more cost $15 per device per month, $12 on an annual plan. Above 100 Relay devices, talk to us about an Enterprise contract.

Supported today Palo Alto Networks PAN-OS, Panorama, Strata Cloud Manager and Prisma Access; Fortinet FortiGate, FortiManager and FortiManager Cloud; Cisco Secure Firewall Threat Defense with FMC, cdFMC or FDM; Cisco ASA, including multiple-context; Check Point gateways with Security Management Server, Multi-Domain Server or Smart-1 Cloud; Cisco ISE; Cisco Catalyst and Nexus switches (IOS, IOS-XE and NX-OS); Cisco Meraki MX, MS and MR. Not available today Aruba, Juniper, cloud platforms and scheduled monitoring. Learn more