A: Any internet-facing system, server, application, or network device that requires vulnerability assessment. This includes web servers, APIs, databases, and network infrastructure.
A: PCI-DSS and HITRUST require quarterly scans (4 per year minimum). Many organizations add verification scans after remediation, totaling 6-8 scans annually.
A: Yes! We provide custom enterprise pricing for organizations with 50+ endpoints. Contact us for a tailored quote that fits your budget and requirements.
A: Additional scans beyond your initial package are available at the same per-endpoint rate. We can also create a custom package for organizations requiring monthly or continuous scanning.
A: Yes, emergency or ad-hoc scans can be scheduled with 24-hour turnaround at standard per-endpoint pricing.
A: Our reports are designed to meet PCI, HITRUST, SOC 2, and ISO 27001 requirements.