Selecting security services
External Penetration Testing
Perform real world attack simulations on your infrastructure to identify existing vulnerabilities and obtain recommendations to improve your overall security.
Starter
1 External IP or Domain
$1,995/30 days
Automated penetration testing for a single external asset.
- 1 External IP or Domain
- No Software Installation
- Executive & remediation reports
- Free rescans
Recommended
Standard
10 External IPs or Domains
$3,495/30 days
Comprehensive testing for growing external environments.
- 10 External IPs or Domains
- Compliance-aligned exploit suite
- Authenticated Web Application Testing
- Free rescans
Advanced
50 External IPs or Domains
$6,495/30 days
Built for larger internet-facing environments.
- 50 External IPs or Domains
- Email & phone technical support
- Full compliance exploit coverage
- Free rescans
Do you require broader coverage?
Contact sales to size a larger deployment for your environment, including manual penetration testing.
Contact SalesPricing FAQ
Common questions about plans and features.
Not sure which package fits? Talk to our team and we’ll help you scope it.
How is CloneGuard pricing structured?
Every order is built from three service families: PCI ASV scanning (per package by asset count), vulnerability scanning (external, internal, and web app), and penetration testing (automated infrastructure or authenticated web app). Add any combination to one subscription, and CloneGuard AI can be added on top of any scanning product.
Which PCI ASV package should I choose?
Starter covers a single IP or domain, Standard covers up to 10, and Advanced covers up to 25. Larger or multi-environment programs use the Custom package with dedicated onboarding. You can add multiple packages of the same tier to expand coverage.
What is the difference between vulnerability scanning and PCI ASV scanning?
PCI ASV scanning satisfies PCI DSS 4.0.1 Requirement 11.3.2 (quarterly external scans by an Approved Scanning Vendor with an Attestation of Scan Compliance). Vulnerability scanning is broader continuous coverage of external, internal, and web application assets, mapped to PCI, HIPAA, SOC 2, ISO 27001, and NIST.
How is penetration testing priced: 30-day or annual?
Automated and authenticated web app pen tests are available as 30-day engagements or annual subscriptions with quarterly retests. Annual delivers a lower effective per-test cost and keeps findings tracked across the year. Expert-led manual testing is sales-assisted and quoted from a scoping call.
What is CloneGuard AI and when should I add it?
CloneGuard AI is our proprietary AI assistant that prioritizes findings, drafts remediation steps, and answers questions in plain language across your scan results. Add it to any scanning product from the AI step of checkout, or skip it and enable it later.
How does the checkout process work?
Build your order, review the summary, and continue to secure checkout. Payments accept credit card, PayPal, Apple Pay, and Google Pay. Onboarding starts the same business day for online purchases; larger custom orders route to our team.
Can I change or expand my subscription later?
Yes. You can add packages or add the CloneGuard AI assistant at any time. Existing scans, exceptions, and reports carry forward so you never lose historical context.
Comparing options? See how Clone Systems compares to other vulnerability management platforms.