Pricing
Start free.
Pay when the work grows.
Start immediately, no credit card. Upgrade when you need template scanning, custom matrices, or full report generation.
Free
For trying Vigihunt on a first target.
- 3 active projects
- 100 AI messages / month
- 3 recon runs / day (subdomains, DNS, HTTP probing)
- Burp / Caido import
- Traffic inspector
- MITRE ATT&CK matrix (read-only)
- Finding tracker
- 1 GB storage
- Community support
Pro
For professionals running paid engagements.
billed $288 / year
- 25 active projects
- 2,000 AI messages / month
- 20 recon runs / day + template scanning
- Custom MITRE matrices
- Report export (DOCX, H1, Bugcrowd)
- SkillForge: custom skills
- 20 GB storage
- Email support
Team
For red teams running concurrent engagements.
billed $1008 / year
- 100 active projects
- 10,000 AI messages / month
- 100 recon runs / day + crawling
- Shared workspaces
- SSO (SAML 2.0)
- Audit logs
- 100 GB storage
- Priority support
Enterprise
On-prem, compliance, and custom retention.
- Unlimited projects & seats
- Unlimited AI messages & recon
- On-prem / VPC deployment
- Custom data retention
- SLA with uptime guarantee
- Dedicated Slack channel
- Custom billing
Compare plans
Every number here is enforced by the quota engine. No surprises.
| Feature | Free | Pro | Team | Enterprise |
|---|---|---|---|---|
| Active projects | 3 | 25 | 100 | Unlimited |
| AI messages / month | 100 | 2,000 | 10,000 | Unlimited |
| Recon runs / day | 3 | 20 | 100 | Unlimited |
| Recon runtime / month | 60 min | 10 hrs | 50 hrs | Unlimited |
| Template scanning | ||||
| Crawling | ||||
| Custom MITRE matrices | ||||
| SkillForge custom skills | ||||
| Report export | DOCX, H1, Bugcrowd | All formats | All formats | |
| Shared workspaces | ||||
| SSO (SAML 2.0) | ||||
| Audit logs | ||||
| On-prem / VPC | ||||
| Storage | 1 GB | 20 GB | 100 GB | Custom |
| Support | Community | Priority | Dedicated Slack |
Frequently asked
What counts as an AI message?
One message you send to the copilot. Follow-up questions in the same conversation each count as one message. Streaming the response back does not count separately.
What counts as a recon run?
One execution of the recon pipeline against a target scope. Each run uses one or more stages: subdomain discovery, DNS resolution, HTTP probing, port scanning, template scanning, and crawling. Runtime is metered in wall-clock minutes from start to completion.
What happens when I hit my quota?
Read access and data export keep working, so your data is never held hostage. AI messages and new recon runs pause until the next billing period or an upgrade. You'll see a clear banner, not a surprise paywall.
Is my captured traffic used to train models?
No. Your HTTP traffic, recon data, findings, and chat history are never used for model training. The methodology knowledge base is shared, but your project data stays yours.
How long is my data retained?
Free: 90 days after last project activity. Pro: 1 year. Team: 2 years. Enterprise: custom retention policy. You can export everything at any time, on any plan.
Can I export my data?
Yes. Every plan includes full data export. Findings export as DOCX, Markdown, or platform-specific formats (HackerOne, Bugcrowd). Traffic exports as HAR. Recon data exports as JSON.
Who can see my traffic and findings?
Only you and teammates you explicitly invite. There is no shared data pool between tenants. Enterprise plans support VPC deployment for full network isolation.
Need a custom deployment?
On-prem, VPC, custom data retention, SAML federation, or a plan that fits your team's shape.
Contact sales