Plans that fit how you ship.

A credit is the unit an AI pentest is paid in. Every pentest runs at a level, and the level sets how many credits that test may spend: Light 200, Standard 1,000, Deep 4,000, Extended 10,000, Maximum 20,000. Credits come with an Essential plan every month, or as a one-off top-up at $0.50 a credit. Passive scanning, monitoring, alerts and their reports come with your plan and never touch your balance.

Essential is a monthly bundle of pentest credits, from 200 a month, and the Essential plan itself comes with it at no extra charge: complete passive scans, continuous monitoring for one domain, email alerts. A bigger bundle works out to less per credit. Business is priced to what you run, through sales, credits included, and adds daily monitoring across 10 domains (more through sales), Slack and Teams alerts, priority support and scoped engagements. Free includes no credits.

You pick a level when you set the test up, and the run holds that level's credits when it starts. When it finishes you are charged for what it actually used, never less than 100 credits and never more than the hold, and the rest goes straight back to your balance. A test that fails is not charged at all. One you cancel is charged only for the work it got through, with no minimum. The full report comes with the run: there is no second payment to read the findings.

Buy a top-up, whenever you want, at $0.50 a credit: 100, 200, 400, 1,000, 2,000 credits, or any whole amount from 100 up. A top-up is an amount, not a test; what it funds depends on the level you run at. If you keep running short, moving to a bigger bundle is the cheaper fix, because a bigger bundle costs less per credit and a top-up is always the flat rate. If your balance is short when you set a pentest up, the Summary step shows exactly how many credits you need.

Credits your plan grants last the cycle they belong to plus a grace month, so an unused grant is still spendable when the next one lands. Credits you buy last twelve months from the purchase. Spending always takes the credits closest to expiring first. Cancelling stops the next charge and the next grant; it does not empty your balance, and what is in it stays spendable until its own expiry date.

Unused credits are not cashed out, but you are never charged for testing you did not get: a failed test returns its whole hold, a cancelled one returns everything except the work it had done, and a finished test is charged for what it used with a 100 credit minimum. Paid plans have a 14-day refund window from the first charge. And if a report does not hold up, email contact@barrion.io and we return the credits it spent.

Both, from Standard up. The agent does the testing, and at Standard and deeper levels a security engineer reviews the report before it is released to you; a Light test releases its report as soon as it finishes. Expert review hours come with the level you test at rather than off your credit balance: a standard test includes 1 hour, a deep test 2, a maximum test 8.

Yes, and it costs nothing. Once you have shipped fixes you can rerun the same pentest as a retest: it reuses the original scope and credentials, checks each finding again, and marks it fixed or still exploitable. A retest holds no credits.

The Free plan runs 18 core passive security checks with 5 scans a day across 3 pages per scan, with step-by-step remediation, score history and PDF export, for as long as you want and with no card. It includes no pentest credits, but you can buy a top-up and run a pentest from a free account.

About 20% against twelve monthly payments, on the whole subscription: the credits are the plan, so the discount is on them too. A year of credits is granted on day one rather than a month at a time.

Yes, anytime, from your plan page: pick a bigger or smaller bundle on the Essential card, or cancel through Manage Subscription. A bigger bundle applies right away and a smaller one from your next renewal.