--- title: "CentralCSP pricing - client-side security plans" description: "Compare CentralCSP plans for client-side security and CSP monitoring. Every paid plan is EU-hosted with all browser report types. 14-day free trial." url: "https://centralcsp.com/en/pricing/" lang: "en" --- Pricing # Plans and pricing for client-side security. EU hosting, all report types, and 90-day retention come standard on every paid plan. Pay annually and get two months free. Monthly Annual Save 2 months by paying yearly ## Start For a first production site. €39.99 / mo 14-day free trial - Applications 3 - Users 5 - Reports / month 250,000 Plan features - Full Reporting-API support - Unlimited scans - Script inventory - Team access and RBAC - Policy builder [Start free trial](https://app.centralcsp.com/?plan=start&billing=monthly) Recommended ## Business Automate it and wire it into your stack. €129.99 / mo - Applications 10 - Users 25 - Reports / month 2,000,000 Everything in Start, plus: - Alerting to six channels - Unlimited alerts - API & MCP [Get started](https://app.centralcsp.com/?plan=business&billing=monthly) ## Scale PCI DSS v4 evidence, at portfolio scale. €349.99 / mo - Applications 30 - Users 100 - Reports / month 10,000,000 Everything in Business, plus: - CVE detection - Payment page monitoring - PCI DSS evidence - SSO and audit log - Invoicing and procurement support [Get started](https://app.centralcsp.com/?plan=scale&billing=monthly) ## Enterprise For banks, insurers, and large accounts. Custom - Applications Custom - Users Custom - Reports / month Custom Everything in Scale, plus: - Custom quotas and contract - A contractual uptime SLA - Priority support and onboarding [Talk to sales](https://centralcsp.com/en/contact/?topic=sales) Trusted by teams across the world Compare plans ## Compare every capability See exactly what each plan includes. | | Start | Business | Scale | Enterprise | | --- | --- | --- | --- | --- | | Sources & ingestion | | | | | | Monitored applications | 3 | 10 | 30 | Custom | | Users | 5 | 25 | 100 | Custom | | Reports ingested / month | 250,000 | 2,000,000 | 10,000,000 | Custom | | Report types | | | | | | Content-Security-Policy | Included | Included | Included | Included | | Script Hash Integrity | Included | Included | Included | Included | | Network errors | Included | Included | Included | Included | | Deprecation | Included | Included | Included | Included | | Intervention | Included | Included | Included | Included | | Crashes | Included | Included | Included | Included | | Cross-Origin-Embedder-Policy | Included | Included | Included | Included | | Cross-Origin-Opener-Policy | Included | Included | Included | Included | | Document-Domain-Policy | Included | Included | Included | Included | | Permissions-Policy | Included | Included | Included | Included | | Integrity-Policy | Included | Included | Included | Included | | Connection-Allowlist | Included | Included | Included | Included | | Detection & alerts | | | | | | Alerting | Not included | Included | Included | Included | | Alert channels | Not included | All (6) | All (6) | All (6) | | Alerts / month | Not included | Unlimited | Unlimited | Unlimited | | Script inventory | Included | Included | Included | Included | | Script analysis | | | | | | Technology identification | Not included | Not included | Included | Included | | CVE detection | Not included | Not included | Included | Included | | Version detection | Not included | Not included | Included | Included | | Real-time alerting | Not included | Not included | Included | Included | | Tools | | | | | | Security header scanner | Included | Included | Included | Included | | Reporting-API checker | Included | Included | Included | Included | | Content-Security-Policy scanner | Included | Included | Included | Included | | Content-Security-Policy evaluator | Included | Included | Included | Included | | Content-Security-Policy builder | Included | Included | Included | Included | | PCI DSS compliance | | | | | | Payment page alerting | Not included | Not included | Included | Included | | Payment page monitoring | Not included | Not included | Included | Included | | Script justification | Not included | Not included | Included | Included | | PCI DSS v4 evidence | Not included | Not included | Included | Included | | Integrations | | | | | | API | Not included | Included | Included | Included | | MCP | Not included | Included | Included | Included | | Team & access | | | | | | Team access | Included | Included | Included | Included | | Role-based access control | Included | Included | Included | Included | | Audit log | Not included | Not included | Included | Included | | Single sign-on (SSO) | Not included | Not included | Included | Included | | Data retention & location | | | | | | Data retention | 90 days | 90 days | 90 days | 90 days | | Data location | EU | EU | EU | EU | | Billing & terms | | | | | | Self-service | Included | Included | Included | Not included | | Invoicing & terms | Not included | Not included | Included | Included | | Legal & procurement support | Not included | Not included | Included | Included | | Support | | | | | | Support | Email | Email | Email | Priority (email) | | Uptime SLA | Not included | Not included | Not included | Included | | Feature requests | Not included | Not included | Included | Included | ## Need enterprise scale? For larger deployments and compliance-heavy teams, we shape CentralCSP around your needs, from quotas and hosting to security and support. [Talk to sales](https://centralcsp.com/en/contact/?topic=sales) - Custom quotas for reports, seats, and applications - SSO, RBAC, and a complete audit log - EU-hosted, with a contractual uptime SLA - Priority support, onboarding, and invoicing FAQ ## Frequently asked questions Plans, billing, and everything in between. ### Is there a free trial? Yes. The Start plan includes a 14-day free trial, so you can add the header and see real reports from your own traffic before you pay. The other plans are sold without one. ### How does annual billing work? Pay yearly and you get two months free: the annual price is ten times the monthly price. You can switch between monthly and annual billing at any time. ### Can I change plans later? Yes. You can upgrade or downgrade at any time from your dashboard as your needs change. ### Which plan do I need for PCI DSS v4? PCI DSS v4 evidence, payment-page monitoring, and script justification are included on the Scale plan. To meet requirements 6.4.3 and 11.6.1, choose Scale. ### What comes standard on every paid plan? EU hosting, all twelve browser report types, 90-day data retention, the script inventory, team access and role-based access control are included on every paid plan, whichever tier you choose. CVE detection starts on Scale. ### Where is my data hosted? All data is hosted in France on OVH and never leaves the EU, so you keep full European data residency. ### Do you offer invoicing for larger teams? Yes, from Scale upwards. Scale and Enterprise can be paid by invoice with custom terms and come with help on security reviews, DPAs, and procurement paperwork. Every self-service plan, Scale included, can also be paid by card checkout. ### Which plan includes SSO and the audit log? Both start on Scale. Scale and Enterprise include single sign-on over SAML or OIDC and a complete, exportable audit log. Team access and role-based access control are on every paid plan, including Start. ### What does the Enterprise plan include? Everything in Scale, with applications, users, and report volume set to whatever your deployment needs, a contractual uptime SLA, and priority email support. It is quoted and invoiced rather than bought online, so talk to sales. ## Ready to start monitoring? Add one header and reports start flowing. No agent, no code changes. Start free, upgrade when you need to. [Start free trial](https://app.centralcsp.com) [Book a demo](https://centralcsp.com/en/contact/?topic=demo) --- Available in: [en](https://centralcsp.com/en/pricing/), [fr](https://centralcsp.com/fr/pricing/)