License Plans

Massively scalable and cost-effective, the Essentials license plan delivers vulnerability intelligence free of false positives, with expert support and access to analysts.

• Un-authenticated testing
• Web Application testing
• Network Layer testing
• Manual validation for all results
• On-demand, continuous or scheduled assessments
• On-demand retests
• Reliable on-demand metrics & KPIs
• 100,000+ Full-Stack vulnerability tests
• 56,000 + CVE checks
• Recommended license for less critical un-authenticated applications
• Recommended for use on permanent brochureware applications

Download Data Sheet (PDF)

Includes all Edgescan Essentials features but also includes authenticated testing to simulate a “logged in” attacker

• Authenticated testing  
• Web application testing  
• Network layer testing  
• Manual validation for all results  
• Recommended assessment for less critical authenticated applications  
• Recommended for use on permanent applications with authentication enabled 
• Expert support – support and access to analysts  
• False positive free vulnerability intelligence  
• Additional penetration tests available as required 
• On-demand, continuous or scheduled assessments  
• On-demand retests  
• Reliable on-demand metrics & KPIs  
• 100,000+ Full-stack vulnerability tests  
• 56,000 + CVE checks 

Download Data Sheet (PDF)

Includes all Edgescan Standard features but also includes a manual business logic penetration test. 

• Penetrating Testing As a Service (PTaaS) 
• Authenticated testing  
• Web application testing  
• Network layer testing  
• Manual validation for all results  
• Edgescan Advanced is delivered by an OSCP and CREST Certified expert team. 
• 12-month vulnerability assessment on-demand and unlimited 
• Additional penetration tests available as required 
• Expert support – support and access to analysts  
• False positive free vulnerability intelligence  
• On-demand, continuous or scheduled assessments  
• On-demand retests  
• Reliable on-demand metrics & KPIs 
• 100,000+ Full-stack vulnerability tests  
• 56,000 + CVE checks 
• Recommended assessment for critical authenticated applications  
• Recommended for use on permanent applications with authentication enabled 
• Recommended for use on applications that process sensitive data 

Download Data Sheet (PDF)

The Attack Surface Management Plan is offered as an add-on license to other license plans and includes:

• Web Application Discovery 
• API Discovery  
• Network Layer Discovery 
• Detect exposed services, ports and endpoints on a continuous basis
• Identification of networking devices, platforms, operating systems, databases and applications
• Determine which service ports are present and listening for transactions
• Identification of services running on the exposed layer
• Expert support – support and access to analysts  
• Continuous discovery 
• Perform live retests on exposed ports
• Fast network host discovery and asynchronous port scanning across your whole global perimeter
• API Discovery across entire estate 
• Customizable scan profiling – be specific about the services you want to test for
• OS Detection – discovery of known OS types based on response fingerprints
• Historical host information for point in time reads of endpoints
• Customizable targeted alerting, which notifies you automatically of any potential exposures (e-mail, webhook, SMS) 
• Recommended license for all potential public facing infrastructure 

Download Data Sheet (PDF)

Recommended license for all potential public-facing infrastructure and internal estates.

• Optional authenticated testing 
• Network layer testing  
• Manual validation for all results 
• Expert support – support and access to analysts  
• False positive free vulnerability intelligence  
• On-demand, continuous or scheduled assessments  
• On-demand retests  
• Reliable on-demand metrics & KPIs 
• 56,000 + CVE checks 

Download Data Sheet (PDF)

Benefits to Organisation from the Edgescan ASV Service:

• No agents or software installations: Edgescan ASV does not use agents or install software to perform our scanning service giving you peace of mind in the knowledge that your environment will not change.
• No disruption: When conducting a scan, Edgescan ASV does not interfere with the cardholder data system.
• Production-safe testing: Edgescan ASV is a production safe service. We deliver assessments to help ensure we do not cause outages.
• Above the reporting standard: Edgescan ASV produces reports that conform to PCI-ASV standards, and we go beyond that with consolidated remediation information so you know how to fix issues if you do fail a control.
• Automatically schedule the required quarterly scans, and also scan as often as you like on an ad-hoc manner, for PCI compliance and for identifying and remediating vulnerabilities as soon as they appear in your network.
• Leverage 24/7 online help and email or telephone support for understanding and fixing issues.
• Maintain coverage on all assets either on-premises, in private, public or hybrid clouds.
• Scan your web apps during and after development to ensure they’re securely built and securely maintained