Use Hector for a single risky feature, one urgent release, recurring release coverage, or a continuous black-box testing program across your application portfolio.
Baseline promise
These are Hector's standard promises, not tier differentiators. The plans below change scope, cadence, depth, reporting use, and review priority.
Plans
Your launch check. For MVPs, early SaaS, and marketing-plus-light-app builds shipping their first real security evidence or clearing that first vendor questionnaire.
Features
Your release coverage. For production SaaS clearing a SOC 2 / ISO audit, unblocking an enterprise deal, or proving security to a buyer who’s holding up the contract. The report is the deliverable and ours is built to pass.
Features
Your continuous program. For large platforms, complex RBAC, and multi-tenant systems where the attack surface is big, the stakes are high, and “good enough” isn’t. Quoted to your real surface, measured, not guessed.
Features
Scope factors
Hector pricing starts with a simple buying motion, then adjusts when the application requires deeper black-box coverage.
Use cases
Pick one feature test, one urgent assessment, recurring release coverage, or a continuous program.
Define the application, credentials, user roles, allowed windows, and safety constraints.
Hector crawls, analyzes, and runs autonomous workers against the approved black-box scope.
Hector reviews reported vulnerabilities, delivers the report, and validates remediation through the retest path.
FAQ
Everything you need to know about Hector.
Because scope, not features, drives the real cost of testing. Every plan runs all 8 vulnerability agents and ships an audit-grade report. The tiers change how much surface we cover, how deep the agents go, how fast you get results, and how much human review sits on top.
