What each plan includes
| Plan | Price | Who it is for | Includes |
|---|---|---|---|
| Onboarding | $2,000 USD one time | Every new client; also sold on its own | Inventory of everything exposed to the internet (domains, IPs, ports, services, certificates, email), initial review of the repository and servers, setup of the monitoring and the threat feed, prioritized fix list and a 1-hour session. |
| Vigía | $900 USD a month | Small business with 1 VPS server, 1 GitHub organization and a website | Weekly scan of what is exposed, alert within 24 h on a critical vulnerability, AI review of every change to the repository, threat monitoring (CVEs, leaked credentials, look-alike domains), monthly report and a 30-minute call. |
| Vigía Plus | $1,800 USD a month | Company with an IT team, several apps or up to 5 servers | Everything in Vigía across several applications and repositories with real code reading, cloud configuration (AWS, Azure, GCP, Vercel, DigitalOcean) and identity (Microsoft 365, Google Workspace), written incident response plan and annual drill, management and technical reports, 2 calls a month. |
| Enterprise | from $3,500 USD a month | More than 5 servers, several legal entities or corporate-customer requirements | Custom scope built on Vigía Plus. Quoted after the assessment. |
Prices are identical in the United States and Mexico. Mexican clients can pay in pesos at the exchange rate of the day (reference published in October 2026: 18.76 MXN per USD).
Extras, always billed separately
| Service | Price | How it is delivered |
|---|---|---|
| Manual pentest of one app (web, API or mobile) | $1,500–$2,500 USD per tester-day | With a partner; a typical app takes 3 to 8 days. We define the scope and read the report with you. One retest included. |
| One-time AI assessment of one app | $1,500 USD | Single scope, no monthly fee, report in 5 business days. |
| Incident response | $2,500 USD per day, minimum 1 day | Containment, analysis of what happened, recovery and report. Clients with a plan get priority. |
| Phishing simulation + staff training | $4 USD per user per month, minimum 20 | Monthly campaigns, a short video per topic and a report of who clicked. |
| Managed antivirus / EDR | $12 USD per device per month | Resold with our monitoring on top; only if you ask. |
| AI cybersecurity training (6 h, up to 15 people) | $2,000 USD + travel | Hands-on workshop, on site or online. |
How onboarding works
1. Free 15-minute assessment: what you have (website, apps, servers, cloud, email) and who looks after it today. 2. Contract, NDA and read-only access checklist: repository, server, cloud and DNS. 3. Onboarding: inventory, initial review, monitoring setup and a prioritized report in a 1-hour session. 4. Monthly monitoring: the agents run every day; every month you get the management report, the technical report and the call.
INSPECTOR