What does the deep pentest add to a website scan?
The deep pentest goes further than the 350-module scan. It crawls your application, including pages behind a login, then sends test payloads to the inputs it finds. Each part is a separate add-on with its own price, and you can run them alone or together.
What are the parts of a deep pentest?
- Deep crawler. Maps the pages, forms and parameters of your application. It can log in, so it reaches authenticated areas a plain scan never sees.
- Active testing scan. Sends detection payloads to the inputs the crawler found. It checks for SQL injection, cross-site scripting, server-side template injection, CRLF injection, open redirects, HTTP method tampering, host header and cache poisoning, request smuggling and session fixation.
- Nuclei scan. Runs the open-source Nuclei engine and its community template library, which includes CVE checks. By default it runs critical, high and medium severity templates with a 5 minute limit.
- Full deep pentest. Runs the crawler, active testing and Nuclei as one job. You choose which of the three phases to include.
- Agent-assisted scan. Uses telemetry from a SuperClue SOC agent you have installed (running services, technology stack) to aim the scan at what is actually deployed.
Progress streams live while a full deep pentest runs.
Is Nuclei always available?
Nuclei runs only when the Nuclei engine is installed on the scanning server. The platform checks this at start-up. If the engine is missing, the Nuclei phase does not run and is not charged. The number of templates depends on the installed library and changes over time, so we do not quote a fixed figure.
Will active testing damage my application?
The payloads are built to detect a flaw, not to exploit it or change data. Active testing does submit forms, though, and an application may store what it receives. Run it against staging when you can, and read how our scanner behaves before you scan production.
As with every scan, you must first verify that you own the domain.
What does it cost?
Deep pentest add-ons are billed separately from the per-module website scan.
| Add-on | Cost |
|---|---|
| Deep crawler | 5 credits per crawl |
| Active testing scan | 10 credits per scan |
| Nuclei scan | 15 credits per scan |
| Full deep pentest (all three phases) | 30 credits per scan |
A full deep pentest or an agent-assisted scan charges for the phases you include, so all three phases cost 30 credits. A phase that cannot run on the server, such as Nuclei when it is not installed, is not charged, and a phase that fails is refunded. The agent-assisted scan needs a deployed SOC agent.
See every per-scan price in one table.
View pricing