Priced per application, not per seat. No quote required.
When everyone ships applications, per-seat pricing punishes adoption. NightVision prices per application, unlimited seats, and shows the number most vendors hide behind a call.
Choose a plan
Trial
Kick the tires on your own app
3 days, no commitment
- Full DAST scans, web apps + APIs
- Fully authenticated scanning
- Findings tied to file + line
- API Discovery scans
- CI/CD integration
- No credit card required
Single Application
Whole-app DAST for one application
per application, billed yearly
- Coordinated DAST workflow for web apps + APIs
- Crawler built for modern single-page apps
- Authenticated scanning (recorded logins, TOTP/MFA)
- HTTP evidence on request-level findings
- Code Traceback on supported source-discovered API scans
- Agent-assisted remediation and rescanning under repo controls
- API eNVy™ discovery: OpenAPI specs from source
- CI/CD integration
- Unlimited user seats
- SOC 2 report access
Enterprise
Teams and organizations
Talk to sales below
- Whole-app DAST across your portfolio
- Unlimited / custom scan volume
- Private network scanning (Smart Proxy)
- SSO / SAML
- Team-wide seats
- Priority + dedicated support
- SOC 2 report access
Trusted by security teams at BeyondTrust, JPMorgan, Tyler, Ineo, and Spektrum · SOC 2 Type 2, report available under NDA
What's in each plan
Every plan includes the coordinated web + API DAST workflow, authenticated scanning, evidence-backed findings with Code Traceback on supported source-discovered API scans, and API eNVy™ discovery. The difference is volume, team features, and support.
| Feature | Trial | Single Application | Enterprise |
|---|---|---|---|
| DAST scans (coordinated web app + API workflow) | Included (trial limits) | ✓ | Unlimited / custom |
| Authenticated scanning (recorded logins, TOTP/MFA) | ✓ | ✓ | ✓ |
| Code Traceback on source-discovered API scans | ✓ | ✓ | ✓ |
| AI-assisted remediation (explanations, agent-proposed changes, rescans) | ✓ | ✓ | ✓ |
| API Discovery scans (API eNVy™) | Included (trial limits) | 1 application | Unlimited / custom |
| OpenAPI/Swagger generation from source | ✓ | ✓ | ✓ |
| Undocumented & shadow API detection | ✓ | ✓ | ✓ |
| CI/CD integration (GitHub Actions, GitLab, Jenkins, Azure DevOps) | ✓ | ✓ | ✓ |
| Private network scanning (Smart Proxy) | – | – | ✓ |
| PDF & CSV reporting | – | ✓ | ✓ |
| Seats | 1 | Unlimited | Unlimited |
| SSO / SAML | – | – | ✓ |
| Support | Community | Standard | Priority + dedicated |
| SOC 2 report access | – | ✓ | ✓ |
Pricing questions, answered.
Is there a free trial?
Yes, a free 3-day trial that includes DAST and API Discovery. No credit card required.
What is the Single Application plan?
Full coverage for a single application at $15,000/year: the complete DAST scanner for web apps and APIs, authenticated scanning, evidence-backed findings, and API eNVy™ API discovery & documentation, with unlimited user seats. Enterprise options are available.
What's included in Enterprise?
Higher scan volumes, CI/CD integrations across your org, private network scanning, SSO, and priority support. Contact sales@nightviz.ai for a quote.
Can I upgrade from the trial without re-onboarding?
Yes. Your projects, scan history, and configurations carry over when you move from Trial to a paid plan.
How does NightVision pricing compare to other DAST tools?
Most enterprise DAST tools are quote-only and typically run five to six figures annually. NightVision's Single Application plan is a transparent $15,000/year, covering full web + API DAST scanning and API eNVy™ discovery with unlimited seats. See our head-to-head comparisons.
The trial costs nothing. No quote, no call required.
Connect a repo, map your whole app from source and the browser, and review HTTP evidence on request-level findings before deciding anything.