Pricing
Plans and pricing for client-side security.
EU hosting, all report types, and 90-day retention come standard on every paid plan. Pay annually and get two months free.
Save 2 months by paying yearly
Start
For a first production site.
€39.99/ mo
14-day free trial
- Applications3
- Users5
- Reports / month250,000
Plan features
- Full Reporting-API support
- Unlimited scans
- Script inventory
- Team access and RBAC
- Policy builder
RecommendedGet started
Business
Automate it and wire it into your stack.
€129.99/ mo
- Applications10
- Users25
- Reports / month2,000,000
Everything in Start, plus:
- Alerting to six channels
- Unlimited alerts
- API & MCP
Scale
PCI DSS v4 evidence, at portfolio scale.
€349.99/ mo
- Applications30
- Users100
- Reports / month10,000,000
Everything in Business, plus:
- CVE detection
- Payment page monitoring
- PCI DSS evidence
- SSO and audit log
- Invoicing and procurement support
Enterprise
For banks, insurers, and large accounts.
Custom
- ApplicationsCustom
- UsersCustom
- Reports / monthCustom
Everything in Scale, plus:
- Custom quotas and contract
- A contractual uptime SLA
- Priority support and onboarding
Trusted by teams across the world
Compare plans
Compare every capability
See exactly what each plan includes.
| Start | Business | Scale | Enterprise | |
|---|---|---|---|---|
| Sources & ingestion | ||||
| Monitored applications | 3 | 10 | 30 | Custom |
| Users | 5 | 25 | 100 | Custom |
| Reports ingested / month | 250,000 | 2,000,000 | 10,000,000 | Custom |
| Report types | ||||
| Content-Security-Policy | Included | Included | Included | Included |
| Script Hash Integrity | Included | Included | Included | Included |
| Network errors | Included | Included | Included | Included |
| Deprecation | Included | Included | Included | Included |
| Intervention | Included | Included | Included | Included |
| Crashes | Included | Included | Included | Included |
| Cross-Origin-Embedder-Policy | Included | Included | Included | Included |
| Cross-Origin-Opener-Policy | Included | Included | Included | Included |
| Document-Domain-Policy | Included | Included | Included | Included |
| Permissions-Policy | Included | Included | Included | Included |
| Integrity-Policy | Included | Included | Included | Included |
| Connection-Allowlist | Included | Included | Included | Included |
| Detection & alerts | ||||
| Alerting | Not included | Included | Included | Included |
| Alert channels | Not included | All (6) | All (6) | All (6) |
| Alerts / month | Not included | Unlimited | Unlimited | Unlimited |
| Script inventory | Included | Included | Included | Included |
| Script analysis | ||||
| Technology identification | Not included | Not included | Included | Included |
| CVE detection | Not included | Not included | Included | Included |
| Version detection | Not included | Not included | Included | Included |
| Real-time alerting | Not included | Not included | Included | Included |
| Tools | ||||
| Security header scanner | Included | Included | Included | Included |
| Reporting-API checker | Included | Included | Included | Included |
| Content-Security-Policy scanner | Included | Included | Included | Included |
| Content-Security-Policy evaluator | Included | Included | Included | Included |
| Content-Security-Policy builder | Included | Included | Included | Included |
| PCI DSS compliance | ||||
| Payment page alerting | Not included | Not included | Included | Included |
| Payment page monitoring | Not included | Not included | Included | Included |
| Script justification | Not included | Not included | Included | Included |
| PCI DSS v4 evidence | Not included | Not included | Included | Included |
| Integrations | ||||
| API | Not included | Included | Included | Included |
| MCP | Not included | Included | Included | Included |
| Team & access | ||||
| Team access | Included | Included | Included | Included |
| Role-based access control | Included | Included | Included | Included |
| Audit log | Not included | Not included | Included | Included |
| Single sign-on (SSO) | Not included | Not included | Included | Included |
| Data retention & location | ||||
| Data retention | 90 days | 90 days | 90 days | 90 days |
| Data location | EU | EU | EU | EU |
| Billing & terms | ||||
| Self-service | Included | Included | Included | Not included |
| Invoicing & terms | Not included | Not included | Included | Included |
| Legal & procurement support | Not included | Not included | Included | Included |
| Support | ||||
| Support | Priority (email) | |||
| Uptime SLA | Not included | Not included | Not included | Included |
| Feature requests | Not included | Not included | Included | Included |
Need enterprise scale?
For larger deployments and compliance-heavy teams, we shape CentralCSP around your needs, from quotas and hosting to security and support.
Talk to sales- Custom quotas for reports, seats, and applications
- SSO, RBAC, and a complete audit log
- EU-hosted, with a contractual uptime SLA
- Priority support, onboarding, and invoicing
FAQ
Frequently asked questions
Plans, billing, and everything in between.
Ready to start monitoring?
Add one header and reports start flowing. No agent, no code changes. Start free, upgrade when you need to.
