// Pricing

Free to learn.
Pay to bill.

Community is free forever for personal and educational use. A Professional licence covers paid work — prepaid, no auto-renewal, no enterprise upsell.

€0community

free forever · no account

  • —proxy, scanner, intruder, repeater, decoder
  • —64 active + 48 passive checks
  • —runs fully offline
  • —personal, learning & evaluation use
download →
€10/ month, flat

commercial use · the offensive bundle

  • —licence to use Hugin for paid, client work
  • —everything free in Community, forever
  • —174 MCP tools incl. 36 vurl-offensive
  • —blind-bug detection — OOB over 8 protocols
  • —race conditions · Synaps WASM · Lua extensions
  • —native browser automation · BAC & intelligence pipelines
  • —collaboration & multi-project
  • —cancel anytime — binary keeps working offline
create your account →

Anonymous — one ID, no email, no password. Add Pro time from the app or the account page.

no auto-renewal · 7-day trial, no card · one trial per device

// Community

Free,
in full.

The proxy, the in-band scanner, intruder, repeater, decoder and sequencer — free and unthrottled. The Pro extensions are listed below.

Scanner
64+active
Passive
48checks
Payloads
21generators
Processors
32rules
01

Proxy

HTTP/1.1, HTTP/2 & WebSocket · on-the-fly TLS · match & replace, scope · hold / forward / drop intercept

02

Intruder

21 payload generators, 32 processors · sniper, pitchfork, cluster bomb, battering ram · Turbo mode

03

Toolkit

repeater · decoder with transform chains · sequencer (FIPS randomness) · comparer · sitemap

04

Offline

runs fully offline · no account · no telemetry

Full coverage matrix →

// Pro

The offensive
bundle.

Everything in Community, plus the offensive toolkit, agents, and team features. €10 / month.

MCP tools
174+
vurl-offensive
36tools
Projects
Unlimitedmulti-project isolation
01

Race conditions

single-packet attack · last-byte sync · barrier coordination · prebuilt modules

02

Synaps WASM

community scanner modules in Rust → WASM · Wasmtime sandbox: 1B-instruction fuel, 16 MB cap

03

vurl-offensive

36 tools for high-value classes — HTTP smuggling, client-side desync, K8s & cloud-metadata SSRF, MCP RCE

04

Lua extensions

hook requests, responses & scan results · modify live traffic · permission-gated, sandboxed

05

Collaboration

E2E-encrypted project sharing — flows, findings & scope in real time · multi-project isolation

06

AI agent

autonomous exploration over 174 MCP tools — set a budget and let it drive the proxy, scanner, and intruder

Compare Pro tier-by-tier →

// Questions

FAQ

How do accounts work?
Generate an account ID on the account page. It looks like FFGX WKFC 5EMN 2DND. Save it — there is no email, no password, no recovery.
What happens when my time runs out?
Pro features stop; your data stays and Community keeps working. Buy more time whenever you like.
Can I pay with crypto?
Yes — Bitcoin and Monero via BTCPay Server. No KYC, no tracking.
Refunds?
Card: full refund within 14 days if Pro features were not used. Crypto: not refundable (blockchain transactions are irreversible). Full refund policy.
Why no Enterprise tier?
One flat price for everyone. We do not differentiate by employer or team size.
Student discount?
Verified GitHub Student Developer Pack holders get 12 months of Pro at no cost. Claim it here.