KEV-TICKERcves_ytd=49,044kev_total=1,662added_7d=+6[CISA KEV ↗]
// scanner: hostedscan

HostedScan pricing 2026: Basic $39/mo to Professional $189/mo

Managed wrapper around OpenVAS / ZAP / Nuclei / sslyze. Cheap entry point for solo founders.

author: Oliver Wakefield-Smith · verified 2026-06-26
// direct-answer

What does HostedScan cost in 2026?

Basic $39/mo; Premium $109/mo; Professional $189/mo (each from 5 targets); Flex from $3,500/yr for high-volume usage. A 14-day free trial replaces the old perpetual free plan. Managed wrapper around OpenVAS / ZAP / Nuclei / sslyze.

Pricing snapshot

  • Trial14 days free, no perpetual free plan on the pricing page
  • Basic$39 / month, from 5 targets, unlimited scans
  • Premium$109 / month, adds API access and real-time results
  • Professional$189 / month, deeper coverage; Flex from $3,500/yr for high volume

What scales, what does not

  • Underlying engines are OpenVAS (network), OWASP ZAP (web), Nuclei (template-based), sslyze (TLS).
  • Removes the operational lift of running OSS scanners yourself. The price difference vs running OpenVAS on a small VM is the ops time.
  • Reports are auditor-friendly and exportable.

Where it hits the ceiling

Useful up to ~100 targets; serious enterprise estate still wants Tenable / Qualys / Rapid7 evidence packaging.

// price-bandPHOSPHOR// verified 2026-07-27
// faq

FAQ

  • Is HostedScan pricing public?
    Yes. HostedScan publishes list pricing on its product page (cited above).
  • Is there a free tier of HostedScan?
    HostedScan's pricing page now leads with a 14-day free trial rather than a perpetual free plan (checked 2026-07-27). The cheapest paid plan, Basic, is $39/month for 5 targets.
  • Does HostedScan cover web application scanning?
    Limited; for serious web DAST coverage pair with Burp Enterprise, Invicti, or Acunetix.
  • Does HostedScan produce PCI ASV evidence?
    Indirectly; pair with an ASV-attested tool for the formal quarterly ASV scan.
  • How often does HostedScan update its vulnerability content?
    Daily for commercial scanners (Tenable plugins, Qualys signatures, Rapid7 recog). Open-source OpenVAS NVT feed is daily but lags commercial coverage by hours to days.
Related: Pricing cheatsheet How we verify Directory