AuditCore is a one-time payment per site. You pay once for a tier (Starter $29, Growth $99, or Business $299) and rescan that site as often as you want — there's no subscription. Higher tiers always cover lower-tier rescans.

Yes. The Free Trial gives you a single-page audit with the full security stack (47+ scanners), SEO Audit (60+ checks), AI-Readiness Score, security headers and SSL — no credit card required.

A page is one URL crawled by our Playwright crawler. Starter covers 25 pages, Growth 100 pages, Business 500 pages. The crawler follows internal links from your homepage. You can also exclude specific paths.

Yes — rescans are unlimited and free for every site you've paid for, forever. We diff results between scans so you can verify which findings are fixed and which are new.

Growth ($99) adds OWASP ZAP active scanning, Nuclei (8000+ CVE templates), subdomain discovery, JWT/OAuth/session testing, AI prompt-injection testing, and 50/day AI Fix Generator quota. Starter ($29) is surface checks only — headers, SSL, SEO, sensitive files.

Yes — 7-day money-back guarantee, no questions asked. If you're not satisfied with the report, email [email protected] for a full refund.

Yes. The Business tier ($299) includes APK and IPA static analysis — manifest, permissions, secret detection in binary, certificate pinning, native binary protections (PIE, NX, RELRO), and 14 tracker SDK detection.

Yes — by default we run safe scanners. Active scanning (ZAP, sqlmap) uses --batch and --technique=BEU profile that avoids destructive payloads. You can also restrict scope to specific paths if needed.

For sites you don't own, no — but the report is shorter (we skip authenticated and active scans). For full results, add a TXT record or upload a verification file.

Yes — there's a free GitHub Action (auditcore/scan-action), Slack slash command (/auditcore), webhook events with HMAC signatures, and a programmatic REST API with API keys (ac_live_*).