Planes a tu medida.
Elige la cobertura que necesitas hoy y amplía cuando estés listo — cada proyecto se adapta a tu entorno.
Planes
Cobertura continua — todo lo que incluye cada plan, en detalle.
Starter
Weekly vulnerability monitoring for a single application. Know what's exposed and how to fix it.
- Escaneo de web / app1 / mes · 5 dominios · estándar
- Escaneo de código fuente1 / mes · 3 repositorios · estándar
- Escaneo cada 7 díasSemanal · 1 dominio · estándar
- Miembros del equipo2
- Retención de datos3 meses
- Monitorización dark web1 dominio
- Weekly scheduled monitoring across all your assets
- 5 scannable assets (domain, IP or application)
- 4 on-demand scans per month
- Unlimited remediation rescans
- Code scanning for 3 repositories (SAST, dependencies, secrets)
- Attack surface discovery on 1 root domain
- Dark web and breach monitoring for your domain
- Client portal, security dashboard and scan history
- Unified weekly report with PDF export
- Security score after every cycle
- 2 users
- 3 months data retention
- Email support
- Bug hunting — manual testing by a specialistBug Hunting Sprint · €2,000.00 pago único →
- Penetration testingWeb Application Penetration Test — Small · €1,900.00 pago único →
- AI exposure detection — available on Business and aboveBusiness · €249.00 / mes →
- Remediation workflow and scan comparison — available on Business and aboveBusiness · €249.00 / mes →
- AI Remediation AssistantAI Remediation Assistant · €29.00 / mes →
- CSV/JSON export, API and Jira — available on Business and aboveBusiness · €249.00 / mes →
- Professional onboardingOnboarding profesional · €350.00 pago único →
Business
Full security improvement cycle across your applications, your code, and your external footprint.
- Escaneo de web / app10 / mes · 20 dominios · en profundidad
- Escaneo de código fuente10 / mes · 25 repositorios · en profundidad
- Escaneo cada 7 díasSemanal · 10 dominios · en profundidad
- Miembros del equipo10
- Retención de datos12 meses
- Monitorización dark web10 dominios
- 10% discount on all professional services
- Priority support within one business day
- 12 months data retention
- 10 users
- Audit log
- CSV/JSON export, API access and Jira integration
- Management reporting
- Remediation SLA tracking
- Prioritization by CVSS and EPSS
- Scan-to-scan comparison and score history
- Remediation workflow and vulnerability tracking
- Dark web monitoring for 3 domains and 10 monitored identities
- Attack surface discovery on 3 root domains, with new assets scanned automatically
- AI exposure detection — LLM keys, prompt leaks, AI endpoints
- Code scanning for 25 repositories (SAST, dependencies, secrets)
- Unlimited remediation rescans
- 20 on-demand scans per month
- 20 scannable assets (domain, IP or application)
- Weekly scheduled monitoring across all your assets
- Everything in Starter
- Professional onboardingOnboarding profesional · €350.00 pago único →
- Infostealer log monitoring — available on Scale and aboveScale · €599.00 / mes →
- SSO/SAML, SIEM and webhooks — available on Scale and aboveScale · €599.00 / mes →
- ServiceNow integrationServiceNow Integration · €39.00 / mes →
- AI Remediation AssistantAI Remediation Assistant · €29.00 / mes →
- Penetration testingWeb Application Penetration Test — Small · €1,900.00 pago único →
- Bug hunting — manual testing by a specialistBug Hunting Sprint · €2,000.00 pago único →
Scale
Broader coverage, deeper intelligence, and the integrations your security workflow already runs on.
- Escaneo de web / app30 / mes · 60 dominios · en profundidad
- Escaneo de código fuente50 / mes · 100 repositorios · en profundidad
- Escaneo cada 7 díasSemanal · 40 dominios · en profundidad
- Miembros del equipo25
- Retención de datos25 meses
- Monitorización dark web20 dominios
- 15% discount on all professional services
- Assisted onboarding included
- Priority support within 4 hours, with a quarterly posture review
- 24 months data retention
- 25 users
- Multi-project organization
- API access with extended rate limits
- ServiceNow, SIEM and webhook integrations
- SSO/SAML
- Executive reporting
- AI Remediation Assistant included
- Risk-based prioritization enriched with CISA KEV
- Dark web monitoring for 10 domains and 30 monitored identities, including infostealer logs
- Attack surface discovery on 10 root domains
- AI exposure detection — LLM keys, prompt leaks, AI endpoints
- Code scanning for 100 repositories (SAST, dependencies, secrets)
- Unlimited remediation rescans
- 60 on-demand scans per month
- 60 scannable assets (domain, IP or application)
- Weekly scheduled monitoring across all your assets
- Everything in Business
- Multiple organizations and custom RBAC — available on EnterpriseEnterprise · Habla con un experto →
- Dedicated environment — available on EnterpriseEnterprise · Habla con un experto →
- Daily monitoring — available on EnterpriseEnterprise · Habla con un experto →
- White-label portalWhite-Label Portal · €300.00 / mes →
- Penetration testingWeb Application Penetration Test — Standard · €3,500.00 pago único →
- Bug hunting — manual testing by a specialistContinuous Bug Hunting · €950.00 / mes →
Enterprise
A continuous security platform for multiple organizations, with your branding, your environment, and your SLA.
- Escaneo de web / appIlimitado
- Escaneo de código fuenteIlimitado
- Escaneo cada 7 díasSemanal
- Test de penetraciónIlimitado
- Auditoría de seguridadIlimitado
- Escaneo de red internaIlimitado
- Miembros del equipoIlimitado
- Monitorización dark webIncluido
- 20% discount on all professional services
- Full onboarding run by our team
- Dedicated support channel and named account manager
- Contractual platform SLA
- Data retention agreed per contract
- Unlimited users
- Dedicated environment
- White-label portal on your own domain
- Executive and custom reporting
- ServiceNow, SIEM, ITSM and webhook integrations
- Complete API access
- SSO/SAML
- Custom role-based access control
- Multiple organizations and business units in one console
- Dark web monitoring with custom scope, including infostealer logs
- Unlimited remediation rescans
- On-demand scans agreed per contract
- Negotiated volumes of assets, repositories and domains
- Weekly scheduled monitoring across all your assets
- Everything in Scale
- Daily monitoringDaily Monitoring · €300.00 / mes →
- Penetration testingComprehensive Security Assessment · €800.00 / día →
- Bug hunting — manual testing by a specialistContinuous Bug Hunting · €950.00 / mes →
Servicios
Proyectos delimitados entregados por nuestro equipo — pentests, revisión de código, OSINT y más.
Web Application Penetration Test — Small
A three-day manual test of a single application with one or two user roles and a limited number of flows. Delivered as a report with reproducible findings, severity ratings, and remediation guidance.
- Incluido en el precio
- No — se paga aparte
- Retest adicional
- €650.00 — Retests are performed within 90 days of the report and cover only the findings it contains, not functionality added since. One retest is one round: if findings remain open after it, a further round is charged separately. The retest runs in the same environment as the original test.
Web Application Penetration Test — Standard
A five-day manual test of a SaaS product or business application with multiple user roles and an API. Covers authorization between roles, business logic, and the API surface behind the interface.
- Incluido en el precio
- Sí — un retest en los 90 días siguientes al informe
- Cubre
- Only the findings reported in the original test. Each is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. Where a fix addresses the symptom rather than the cause, we say so and check whether the vulnerability remains reachable by another path. You receive an updated report and a signed statement of remediation. Functionality added after the original test is not covered.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
Web Application Penetration Test — Complex
An extended manual test of a platform where a single authorization flaw has real consequences: multi-tenant data separation, payment logic, and single sign-on.
- Incluido en el precio
- Sí — un retest en los 90 días siguientes al informe
- Cubre
- Two rounds, both covering only the findings reported in the original engagement. Each finding is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. Where a fix addresses the symptom rather than the cause, we say so and check whether the vulnerability remains reachable by another path. Each round produces an updated report, and the final one a signed statement of remediation. Functionality added after the original engagement is not covered.
- Retest adicional
- €650.00 — Both included rounds are used within 90 days of the report. Beyond them, or beyond the window, further retests are charged at €650 per round. Retests run in the same environment as the original engagement.
External Infrastructure Penetration Test
A manual test of your internet-facing infrastructure — up to 10 IP addresses. What is exposed, what is exploitable, and what an attacker reaches from the outside without credentials.
- Incluido en el precio
- No — se paga aparte
- Retest adicional
- €650.00 — Retests are performed within 90 days of the report and cover only the findings it contains, not systems or services added since. One retest is one round: if findings remain open after it, a further round is charged separately. The retest covers the same IP addresses as the original test.
Mobile Application Penetration Test
A five-day manual test of one mobile application, iOS or Android, including the backend API it communicates with. Covers what the app stores, what it transmits, and what its API accepts.
- Incluido en el precio
- Sí — un retest en los 90 días siguientes al informe
- Cubre
- Only the findings reported in the original test, across both the application and its backend API. Each is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. The retest is performed on a new build you provide; features added since the original test are not covered. You receive an updated report and a signed statement of remediation.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
AI / LLM Application Penetration Test
A five-day manual test of an application built on a language model. Covers prompt injection, data leakage, and what the model is able to do on a user's behalf.
- Incluido en el precio
- Sí — un retest en los 90 días siguientes al informe
- Cubre
- Only the findings reported in the original test. Each is confirmed as fixed, partially fixed, or still present. For this class of vulnerability, the retest also states which findings have been mitigated by controls and which remain residual risk by design — prompt injection cannot always be eliminated, and we report honestly where a control reduces risk rather than removing it. Model, tooling or prompt changes made since the original test are not covered.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
Remediation Retest
A specialist verifies that the vulnerabilities found in your penetration test are actually fixed, and issues an updated report reflecting your current state.
- Incluido en el precio
- No — se paga aparte
- Retest adicional
- This service is itself a retest. It verifies the findings of a previous 4Tify engagement, within 90 days of the original report, and covers one round. Further rounds are booked as additional units of this service.
Manual Secure Code Review
A specialist reads your code the way an attacker would, finding the flaws that only appear when you can see the logic behind the interface.
Bug Hunting Sprint
Three days of unstructured manual hunting on your live application. No checklist, no methodology to complete — a specialist looking for the one thing nobody thought of.
Continuous Bug Hunting
A specialist working on your application every month, who knows it well enough to spot what changed and where the new risk went.
OSINT Exposure Investigation
A specialist maps everything publicly discoverable about your organization and up to five key people — and everything already leaked about you in breach data and criminal marketplaces.
Comprehensive Security Assessment
Every layer examined in one engagement — application, code, infrastructure, exposure — and a single answer to the question your board is actually asking: how exposed are we, and what do we do first?
Complementos
Amplía cualquier suscripción — escaneos, activos, usuarios o capacidades extra.
Additional Asset
Add one more asset to your plan at any time. Each asset is scanned on your weekly schedule and counts toward your on-demand scans.
- Escaneo de web / app+1 dominio
Additional Repositories (pack of 10)
Extend code scanning to 10 more repositories. Each one is scanned weekly for vulnerabilities, vulnerable dependencies, and exposed secrets.
- Escaneo de código fuente+10 repositorios
Additional Monitored Domain
Extend attack surface discovery and dark web monitoring to one more root domain. Includes all subdomains discovered under it.
- Monitorización dark web+1 dominio
Monitored Identity
Monitor one individual's work identity for leaked credentials and personal data appearing in breach data and criminal marketplaces.
On-Demand Scan Pack (10 scans)
Ten extra scans you can trigger whenever you want, on top of your plan's monthly allowance. Remediation rescans remain unlimited and are never counted.
- Escaneo de web / app10 × de un solo uso
Additional User
Add one more person to your organization's account, with the role and permissions you assign.
- Miembros del equipo+1
Extended Data Retention
Add 12 months to your plan's retention period. Keep scan history, reports, and score evolution available for longer.
- Retención de datos+12 meses
AI Remediation Assistant
Turn each finding into a concrete fix for your stack: the affected code or configuration, the change to make, and how to verify it worked.
ServiceNow Integration
Push findings into ServiceNow as incidents or change requests, with status synchronized back into 4Tify.
White-Label Portal
Deliver 4Tify to your own clients under your brand, on your own domain, with your logo and colors.
Daily Monitoring
Move your scheduled monitoring from weekly to daily, with results delivered every morning.
Dedicated Environment
Run 4Tify on infrastructure reserved for your organization alone, in the region you choose.
Onboarding profesional
A guided setup session with a 4Tify specialist. Your assets, repositories, integrations and workflow configured with you, not left to documentation.
Cada proyecto se adapta a tu entorno · IVA no incluido.
Preguntas, respondidas.
Los planes son un punto de partida. Cada proyecto se adapta a tu entorno, así que la cifra final refleja tus activos y riesgo reales — nunca una sorpresa.
Sí — la mayoría de clientes empieza con poco y sube a medida que crece su superficie de ataque. Sin lock-in.
Por supuesto. Muchos equipos combinan un pentest puntual con un plan de monitorización siempre activo. Te ayudamos a montar la combinación adecuada.
Siempre. Nuestros ingenieros se integran con tu equipo, incorporando protección y escaneo continuo en tu forma de entregar.
¿No sabes qué plan encaja?
Reserva una llamada de alcance sin compromiso — cartografiamos tu superficie de ataque y recomendamos el punto de partida adecuado.
Habla con un experto