KEV-TICKERcves_ytd=28,720kev_total=1,289added_7d=+7[CISA KEV ↗]
// pricing

Vulnerability scanner pricing cheatsheet: per-asset, per-IP, per-app ceilings

Normalised list pricing per asset, per IP, per app, per cloud account across the 15-scanner directory. Quote-only vendors carry partner-reported ranges.

author: Oliver Wakefield-Smith · verified 2026-06-26
// direct-answer

How much does a vulnerability scanner cost in 2026?

Per-asset network VM lands $21-$199/asset/yr (Rapid7 InsightVM low, Qualys high). Per-app web DAST lands $1.7k-$5k/app/yr (Burp low, Invicti high). Cloud-native CNAPP is quote-only, $50k-$120k mid-market. Snyk anchors per-developer at $25/dev/mo. OSS is free, loaded at admin hours.
ScannerAnchor unitList ratePublic?
Tenable Nessus ProfessionalNessus pricing 2026$4,790 / scanner / year (list)PUBLIC
Tenable Vulnerability ManagementTenable.io pricing 2026~$35 / asset / year (100-asset list anchor)PUBLIC
Qualys VMDRQualys VMDR pricing 2026Quote only (partner-reported ~$199 / asset / yr)QUOTE
Rapid7 InsightVMRapid7 InsightVM pricing 2026~$1.75 / asset / month (~$21/asset/yr) tiered listPUBLIC
WizWiz pricing 2026Quote only; per-workload anchor; $50k-$120k partner-reported mid-marketQUOTE
Orca SecurityOrca Security pricing 2026Quote only; partner-reported $50k-$100k per ~500-workload estateQUOTE
SnykSnyk pricing 2026Free up to caps; Team $25/dev/mo; Enterprise quote-onlyPUBLIC
InvictiInvicti pricing 2026Quote only (~$5,000 / app / yr partner-reported)QUOTE
AcunetixAcunetix pricing 2026Quote only; partner-reported $4,500-$7,000 Standard for 5 targetsQUOTE
Burp Suite EnterpriseBurp Suite Enterprise pricing 2026$8,395-$49,425 / year published tiersPUBLIC
ManageEngine Vulnerability Manager PlusManageEngine VMP pricing 2026Professional $695 / year for 100 workstationsPUBLIC
HostedScanHostedScan pricing 2026Free 5 targets; Pro $30/mo; Business $250/mo; Enterprise $980/moPUBLIC
Pentest-Tools.comPentest-Tools.com pricing 2026$95/mo Basic; $200/mo Advanced; $475/mo TeamsPUBLIC
OpenVAS / Greenbone Community EditionOpenVAS pricing 2026Free (GPL). Loaded cost = admin hours + infra.PUBLIC
TrivyTrivy pricing 2026Free (Apache 2.0). CI/CD scan minutes are the marginal cost.PUBLIC

RFP discount window 2026

Across the 15 scanners on this directory, the realistic RFP discount window holds at 20-35% off list for committed multi-year contracts at meaningful asset counts (1,000+). Above 10,000 assets the floor drops further but is highly negotiation-dependent.

// faq

FAQ

  • Why are some prices quote-only?
    Qualys, Wiz, Orca, Invicti, and Acunetix all decline to publish list pricing on their product pages as of 2026-06-26. Partner-reported ranges in this table come from analyst write-ups and channel partners, not from the vendors themselves.
  • What does the RFP discount window look like?
    20-35% off list for committed multi-year contracts at 1,000+ assets is the realistic 2026 floor. Larger estates negotiate further.
  • How are modules priced on top?
    WAS, EASM, CTEM are almost always sold as add-on modules that uplift the headline number by 30-100% depending on the bundle.
  • Is per-developer cheaper than per-asset?
    Only when developer count is materially lower than asset count. At 50 devs and 5k assets, per-developer wins; at 500 devs and 5k assets, per-asset wins.
  • How often is this page re-verified?
    Monthly cadence; per-vendor pages carry the latest verified date as a row-level stamp.
Related: Directory How we verify Changelog