Tool profile
Detectify: cost, fit and limits
Detectify is an application security platform made by Detectify AB in Stockholm that combines external attack surface monitoring with dynamic web and API scanning for product security teams. It sells annual plans in euros. Plans are annual.
What to know first
Detectify prices by annual platform fee, from a EUR 0 Starter plan to a EUR 15,000 Enterprise plan, with monitoring and scanning billed per domain or per target on top. Its products cover Surface Monitoring, authenticated Application Scanning, API Scanning for REST and GraphQL, internal scanning and PCI ASV. AI appears as Alfred AI, an MCP server and machine-learning fuzzing, although the pricing page does not map them to plans.
Detectify at a glance
| Maker | Detectify AB, Sweden |
|---|---|
| Free plan | No |
| Entry price | From €2,500 per year (Standard, platform fee) |
| API access | Yes |
| Category | Best AI Attack Surface Management Software in 2026, rank 6 of 10 |
| Website | detectify.com |
Who Detectify is best for
Product security teams
Authenticated web scanning, REST and GraphQL API testing and CI/CD hooks sit in the same tool as asset monitoring, which fits teams that ship web applications weekly.
Companies needing PCI ASV scans
PCI ASV scanning is a EUR 500 a year add-on on any plan, a straightforward way for a merchant to run quarterly external scans.
European buyers
A Swedish legal entity, euro pricing and AWS Marketplace purchase options reduce procurement friction for teams that must buy through EU suppliers.
Detectify plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Starter | From EUR 0 per year | Up to 5 users and 1 team, REST and GraphQL API scanning, standard integration templates, email support and self-serve onboarding. |
| Standard | From EUR 2,500 per year | Up to 10 users, SSO through Okta, Ping Identity, OneLogin or SAML 2.0, two hours of expert onboarding and professional support. |
| Professional | From EUR 5,000 per year | Unlimited users and 2 teams, all integrations, internal scanning in one environment, IP range and apex discovery, white-labeled reports and a customer success manager. |
| Enterprise | From EUR 15,000 per year | Unlimited users and teams, custom modules and tests, 3 internal scanning agents, an SLA, quarterly business reviews and 15 hours of onboarding. |
Checked October 2026.
What Detectify does
- Surface Monitoring
- Discovers domains, subdomains, IPs, technologies, ports and protocols, runs payload-based tests on each asset and scans new ones as they appear. The vendor cites 600+ methods for detecting subdomain takeover.
- Application Scanning
- Authenticated dynamic testing with a crawler and fuzzing. The vendor says machine learning chooses which payloads run first, based on past scan results, and rotates payloads between runs.
- API Scanning
- Tests REST and GraphQL APIs including authentication flows, and automatically tests newly discovered APIs. This is available from the Starter plan, per the pricing table.
- Alfred AI and MCP server
- Alfred AI is described as an LLM agent chain that turns new CVE research into scanner tests. An MCP server and agentic tooling let coding agents call payload-based tests against the live surface.
- Internal scanning
- Agents scan systems behind the perimeter. Professional includes one environment, Enterprise includes three agents, and extra environments cost more. This matters for staging systems and intranet apps that cannot be reached from outside.
How Detectify handles your data
The privacy policy names Detectify AB in Stockholm and says processors and third parties may process data outside the EU and EEA, specifically in the USA, using standard contractual clauses or the EU-US Data Privacy Framework. No hosting region or subprocessor list is named, though data processing agreements with suppliers are mentioned. Scan reports are stored so customers can reach them and can be deleted at any time. User account data is kept while the account is active. The policy does not address AI features, and the site shows ISO 27001 and GDPR badges.
Where Detectify falls short in practice
- Add-on pricing is hard to forecast. Surface Monitoring is billed per domain, and Application and API Scanning per target, on top of the platform fee. A buyer with many apps cannot compute the total from the pricing page.
- AI features lack plan mapping. Alfred AI, agentic tooling and the MCP server appear on the pricing page without detail on what each does or which plan includes them, so confirm entitlements in writing.
- Web focus. The product is strongest on web applications, APIs and domains. Operational technology, unmanaged devices and non-web services are outside what the pages describe. Teams with many APIs or hosts should test fit.
Works with
Alternatives to Detectify
Detectify: common questions
How much does Detectify cost per year?
The platform fee starts at EUR 0 for Starter, EUR 2,500 for Standard, EUR 5,000 for Professional and EUR 15,000 for Enterprise. Monitoring and scanning are billed per domain or per target on top, so the real bill depends on how many assets you cover.
Can Detectify scan internal applications?
Yes. Professional includes internal scanning in one environment, and Enterprise includes three internal scanning agents. Extra environments cost extra. Starter and Standard do not list internal scanning on the pricing page. Ask sales for your scope before you sign. The Professional tier adds more flexibility.
Does Detectify support PCI ASV scans?
Yes, PCI ASV scanning is listed as an add-on at EUR 500 per year on any plan. It is meant for merchants who need approved external scans for PCI DSS compliance. It can be added regardless of plan. Merchants can add it at any tier.
What is Alfred AI in Detectify?
The product page describes Alfred AI as an LLM agent chain that converts new CVE research into live scanner tests. The pricing page lists it without saying which plans include it, so ask the vendor before you count on it.
Is there a discount for non-profits?
Yes, the pricing page states a 30 percent discount for non-profits. It also says plans can be bought through AWS Marketplace, which can help teams that draw on a committed cloud spend. Ask whether the discount stacks with marketplace purchases.