KEV-TICKERcves_ytd=28,720kev_total=1,289added_7d=+7[CISA KEV ↗]
// scanner: hostedscan

HostedScan pricing 2026: free 5 targets, then $30/mo Pro

Managed wrapper around OpenVAS / ZAP / Nuclei / sslyze. Cheap entry point for solo founders.

author: Oliver Wakefield-Smith · verified 2026-06-26
// direct-answer

What does HostedScan cost in 2026?

Free 5 targets; Pro $30/mo; Business $250/mo; Enterprise $980/mo. Managed wrapper around OpenVAS / ZAP / Nuclei / sslyze. Cheap entry point for solo founders.

Pricing snapshot

  • Free5 targets, manual scans
  • Pro$30 / month, 10 targets, scheduled scans
  • Business$250 / month, 100 targets, team features
  • Enterprise$980 / month, 500 targets, SLA

What scales, what does not

  • Underlying engines are OpenVAS (network), OWASP ZAP (web), Nuclei (template-based), sslyze (TLS).
  • Removes the operational lift of running OSS scanners yourself. The price difference vs running OpenVAS on a small VM is the ops time.
  • Reports are auditor-friendly and exportable.

Where it hits the ceiling

Useful up to ~100 targets; serious enterprise estate still wants Tenable / Qualys / Rapid7 evidence packaging.

// price-bandPHOSPHOR// verified 2026-06-26
// faq

FAQ

  • Is HostedScan pricing public?
    Yes. HostedScan publishes list pricing on its product page (cited above).
  • Is there a free tier of HostedScan?
    Yes, HostedScan Free covers 5 targets with manual scans.
  • Does HostedScan cover web application scanning?
    Limited; for serious web DAST coverage pair with Burp Enterprise, Invicti, or Acunetix.
  • Does HostedScan produce PCI ASV evidence?
    Indirectly; pair with an ASV-attested tool for the formal quarterly ASV scan.
  • How often does HostedScan update its vulnerability content?
    Daily for commercial scanners (Tenable plugins, Qualys signatures, Rapid7 recog). Open-source OpenVAS NVT feed is daily but lags commercial coverage by hours to days.
Related: Pricing cheatsheet How we verify Directory