Vulnerability management pricing
made easy

14 days of full Business access, whichever plan you pick at signup. No credit card required. When the trial ends, your workspace moves to Free until you choose a paid plan. Scale is request-based. Contact us for a Scale trial.

Vornin pricing combines a fixed plan price with a variable target charge. Choose the plan tier based on the capabilities and scan allowance you need, then set the number of targets in your environment. That keeps vulnerability management pricing predictable: per-target rates fall as you add more, and the calculator above shows your exact monthly and annual price.

Yes, applied automatically, with no sales call. Every paid plan includes 5 targets. Beyond that the per-target rate steps down as your count grows: on monthly billing it is €5 per target from 6 to 50, €4 from 51 to 100, and €3 above 100. Annual billing lowers those to €4, €3.20, and €2.40 per target. The rate is banded, so each target is billed at its band's rate and the calculator above shows the blended total. Above 200 targets the rate holds at the top band; type any number to see it.

Set the slider to your exact count for a live figure. As a guide, on annual billing 100 targets is €439/month on Team and €579/month on Business; 200 targets is €679/month on Team and €819/month on Business. Monthly billing runs higher (200 targets is €854 on Team, €1,024 on Business). A target can be a single host, an IP range, or a whole cloud account, and a range or cloud account already covers many endpoints, so 200 endpoints often map to far fewer targets.

A target is anything you add for scanning: a hostname, IP, IP range, URL, or cloud account (AWS, Azure, Google Cloud, Kubernetes). Each entry counts as one target however many hosts or resources sit inside it, so an IP range or a cloud account is a single target, not one per discovered asset. Assets found during a scan are not counted until you choose to promote them to a target.

No. Paid plans include unlimited users, every scanner engine, and mapping to all 9 supported compliance frameworks. You pay for the plan tier and your target count, not per user and not per scanner. Some advanced workflow, governance, reporting, and audit capabilities depend on the plan tier.

Business and Scale plans generate what an auditor asks for: a period-scoped evidence pack (PDF plus CSVs), a vulnerability management policy built from your live configuration, a quarterly management review report, and per-finding evidence bundles with a tamper-evident chain. It answers the evidence request.

Yes. Vornin's evidence packs document your scan coverage and frequency, SLA history, verified fixes and accepted risks. This audit evidence supports a cyber-insurance renewal or a customer's security questionnaire, just as it would an audit.

Vulnerability management platforms may be priced per asset, per IP, per endpoint, per user, per scanner, per module, per scan allowance, or by managed-service scope. Enterprise and partner-led vendors often provide a custom quote instead.

Pricing models are not directly comparable, because the metered unit, included features, support, and contract minimums all differ.

Vornin combines a fixed plan price with a target-based allowance, and publishes the calculation before you sign up.

Some sell through resellers or managed-service partners whose margins and packages vary. Others support enterprise deployments that need custom integrations, onboarding, support, data residency, or contract terms.

Private quoting gives vendors flexibility to vary commercial terms by customer size, scope, urgency, contract length, and willingness to pay. The mix differs by vendor, but the buyer faces the same result: the final cost is unknown until a sales call or quote.

Vornin publishes its standard prices and target-based calculation, so you can establish the cost without a mandatory discovery call.

Compare the unit being charged, minimum contract value, included users, scanner coverage, compliance mapping, SLA targets and remediation workflow, reporting, evidence retention, integrations, implementation fees, support, professional services, overage rules, and the cost of adding more assets. Check each price is quoted in the currency you pay in; Vornin lists every tier in euro (EUR), VAT excluded.

A low starting price can become expensive when key capabilities are separate modules, or when growth increases your licensed asset count.

Compare vulnerability management software models to see how self-serve platforms, enterprise suites, open-source approaches, and GRC tools differ in pricing structure, operating burden, and audit evidence. For a direct comparison, see Vornin vs HostedScan.

Yes. Slide the target count up or down in-app at any time. Increases are prorated to your billing cycle; decreases take effect on your next renewal.

Listed prices exclude VAT and other applicable taxes. Taxes are calculated at checkout by Paddle, our Merchant of Record, based on your business status and location. Eligible EU business customers may be charged under the reverse-charge mechanism after validating their VAT ID.

You can cancel renewal at any time. Monthly plans remain active until the end of the current billing period; annual plans remain active until the end of the 12-month term. See our terms.

When cancellation takes effect, your workspace moves to Free. Cancellation does not delete the workspace. Free-plan retention applies, with a 30-day grace period before a reduction in retention can remove older eligible records. Export or request workspace deletion through support under our DPA.

Nothing is deleted. When a trial ends, a plan is cancelled, or you move to a smaller plan, your targets, schedules and team members all stay. The new plan decides what runs: your oldest targets and enabled schedules within its limits keep scanning, and the rest are paused until you upgrade or remove the ones you no longer need. Everyone already in the workspace keeps access, and new invitations need room under the plan's user limit.