Vulnerability management pricing
made easy.

14 days of full Team or Business access, depending on which plan you start. No credit card required. Cancel anytime during the trial, or pick a paid tier at the end. Scale is request-based. Contact us for a Scale trial.

Vornin pricing combines a fixed plan price with a variable target charge. Choose the plan tier based on the capabilities and scan allowance you need, then set the number of targets in your environment. That keeps vulnerability management pricing predictable: per-target rates fall as you add more, and the calculator above shows your exact monthly and annual price.

A target is anything you add for scanning: a hostname, IP, IP range, URL, or cloud account (AWS, Azure, GCP, Kubernetes). Each entry counts as one target however many hosts or resources sit inside it, so an IP range or a cloud account is a single target, not one per discovered asset. Assets found during a scan are not counted until you choose to promote them to a target.

No. Paid plans include unlimited users, all 15 scanner engines, and mapping to all 9 supported compliance frameworks. You pay for the plan tier and your target count, not per user and not per scanner. Some advanced workflow, governance, reporting, and audit capabilities depend on the plan tier.

Business and Scale plans generate what an auditor asks for: a period-scoped evidence pack (PDF plus CSVs), a vulnerability management policy built from your live configuration, a quarterly management review report, and per-finding evidence bundles with a tamper-evident hash chain. It answers the evidence request; it is not a certification and not a guaranteed audit outcome.

Vulnerability management platforms may be priced per asset, per IP, per endpoint, per user, per scanner, per module, per scan allowance, or by managed-service scope. Enterprise and partner-led vendors often provide a custom quote instead. These models are not directly comparable, because the metered unit, included features, support, and contract minimums all differ. Vornin combines a fixed plan price with a target-based allowance and publishes the calculation before you sign up.

Some sell through resellers or managed-service partners whose margins and packages vary. Others support enterprise deployments that need custom integrations, onboarding, support, data residency, or contract terms. Private quoting also gives vendors flexibility to vary commercial terms by customer size, scope, urgency, contract length, and willingness to pay. The mix differs by vendor, but the buyer faces the same result: the final cost is unknown until a sales call or quote. Vornin publishes its standard prices and target-based calculation, so you can establish the cost without a mandatory discovery call.

Compare the unit being charged, minimum contract value, included users, scanner coverage, compliance mapping, reporting, evidence retention, integrations, implementation fees, support, professional services, overage rules, and the cost of adding more assets. A low starting price can become expensive when key capabilities are separate modules, or when growth increases your licensed asset count. Compare vulnerability management software models to see how self-serve platforms, enterprise suites, open-source approaches, and GRC tools differ in pricing structure, operating burden, and audit evidence.

Yes. Slide the target count up or down in-app at any time. Increases are prorated to your billing cycle; decreases take effect on your next renewal.

Listed prices exclude VAT and other applicable taxes. Taxes are calculated at checkout by Paddle, our Merchant of Record, based on your business status and location. Eligible EU business customers may be charged under the reverse-charge mechanism after validating their VAT ID.

You can cancel renewal at any time. Monthly plans remain active until the end of the current billing period; annual plans remain active until the end of the 12-month term. See our terms.

Your data stays available for 30 days after cancellation so you can export findings, reports, and audit evidence. After 30 days it is permanently deleted. You can request immediate deletion at any time per our DPA.