Planos à tua medida.
Escolhe a cobertura de que precisas hoje e aumenta quando estiveres pronto — cada projeto é adaptado ao teu ambiente.
Planos
Cobertura contínua — tudo o que cada plano inclui, em detalhe.
Starter
Weekly vulnerability monitoring for a single application. Know what's exposed and how to fix it.
- Scan de site / app1 / mês · 5 domínios · padrão
- Scan de código-fonte1 / mês · 3 repositórios · padrão
- Scan a cada 7 diasSemanal · 1 domínio · padrão
- Membros da equipa2
- Retenção de dados3 meses
- Monitorização dark web1 domínio
- Weekly scheduled monitoring across all your assets
- 5 scannable assets (domain, IP or application)
- 4 on-demand scans per month
- Unlimited remediation rescans
- Code scanning for 3 repositories (SAST, dependencies, secrets)
- Attack surface discovery on 1 root domain
- Dark web and breach monitoring for your domain
- Client portal, security dashboard and scan history
- Unified weekly report with PDF export
- Security score after every cycle
- 2 users
- 3 months data retention
- Email support
- Bug hunting — manual testing by a specialistBug Hunting Sprint · €2,000.00 pagamento único →
- Penetration testingWeb Application Penetration Test — Small · €1,900.00 pagamento único →
- AI exposure detection — available on Business and aboveBusiness · €249.00 / mês →
- Remediation workflow and scan comparison — available on Business and aboveBusiness · €249.00 / mês →
- AI Remediation AssistantAI Remediation Assistant · €29.00 / mês →
- CSV/JSON export, API and Jira — available on Business and aboveBusiness · €249.00 / mês →
- Professional onboardingOnboarding profesional · €350.00 pagamento único →
Business
Full security improvement cycle across your applications, your code, and your external footprint.
- Scan de site / app10 / mês · 20 domínios · em profundidade
- Scan de código-fonte10 / mês · 25 repositórios · em profundidade
- Scan a cada 7 diasSemanal · 10 domínios · em profundidade
- Membros da equipa10
- Retenção de dados12 meses
- Monitorização dark web10 domínios
- 10% discount on all professional services
- Priority support within one business day
- 12 months data retention
- 10 users
- Audit log
- CSV/JSON export, API access and Jira integration
- Management reporting
- Remediation SLA tracking
- Prioritization by CVSS and EPSS
- Scan-to-scan comparison and score history
- Remediation workflow and vulnerability tracking
- Dark web monitoring for 3 domains and 10 monitored identities
- Attack surface discovery on 3 root domains, with new assets scanned automatically
- AI exposure detection — LLM keys, prompt leaks, AI endpoints
- Code scanning for 25 repositories (SAST, dependencies, secrets)
- Unlimited remediation rescans
- 20 on-demand scans per month
- 20 scannable assets (domain, IP or application)
- Weekly scheduled monitoring across all your assets
- Everything in Starter
- Professional onboardingOnboarding profesional · €350.00 pagamento único →
- Infostealer log monitoring — available on Scale and aboveScale · €599.00 / mês →
- SSO/SAML, SIEM and webhooks — available on Scale and aboveScale · €599.00 / mês →
- ServiceNow integrationServiceNow Integration · €39.00 / mês →
- AI Remediation AssistantAI Remediation Assistant · €29.00 / mês →
- Penetration testingWeb Application Penetration Test — Small · €1,900.00 pagamento único →
- Bug hunting — manual testing by a specialistBug Hunting Sprint · €2,000.00 pagamento único →
Scale
Broader coverage, deeper intelligence, and the integrations your security workflow already runs on.
- Scan de site / app30 / mês · 60 domínios · em profundidade
- Scan de código-fonte50 / mês · 100 repositórios · em profundidade
- Scan a cada 7 diasSemanal · 40 domínios · em profundidade
- Membros da equipa25
- Retenção de dados25 meses
- Monitorização dark web20 domínios
- 15% discount on all professional services
- Assisted onboarding included
- Priority support within 4 hours, with a quarterly posture review
- 24 months data retention
- 25 users
- Multi-project organization
- API access with extended rate limits
- ServiceNow, SIEM and webhook integrations
- SSO/SAML
- Executive reporting
- AI Remediation Assistant included
- Risk-based prioritization enriched with CISA KEV
- Dark web monitoring for 10 domains and 30 monitored identities, including infostealer logs
- Attack surface discovery on 10 root domains
- AI exposure detection — LLM keys, prompt leaks, AI endpoints
- Code scanning for 100 repositories (SAST, dependencies, secrets)
- Unlimited remediation rescans
- 60 on-demand scans per month
- 60 scannable assets (domain, IP or application)
- Weekly scheduled monitoring across all your assets
- Everything in Business
- Multiple organizations and custom RBAC — available on EnterpriseEnterprise · Fala com um especialista →
- Dedicated environment — available on EnterpriseEnterprise · Fala com um especialista →
- Daily monitoring — available on EnterpriseEnterprise · Fala com um especialista →
- White-label portalWhite-Label Portal · €300.00 / mês →
- Penetration testingWeb Application Penetration Test — Standard · €3,500.00 pagamento único →
- Bug hunting — manual testing by a specialistContinuous Bug Hunting · €950.00 / mês →
Enterprise
A continuous security platform for multiple organizations, with your branding, your environment, and your SLA.
- Scan de site / appIlimitado
- Scan de código-fonteIlimitado
- Scan a cada 7 diasSemanal
- Teste de penetraçãoIlimitado
- Auditoria de segurançaIlimitado
- Scan de rede internaIlimitado
- Membros da equipaIlimitado
- Monitorização dark webIncluído
- 20% discount on all professional services
- Full onboarding run by our team
- Dedicated support channel and named account manager
- Contractual platform SLA
- Data retention agreed per contract
- Unlimited users
- Dedicated environment
- White-label portal on your own domain
- Executive and custom reporting
- ServiceNow, SIEM, ITSM and webhook integrations
- Complete API access
- SSO/SAML
- Custom role-based access control
- Multiple organizations and business units in one console
- Dark web monitoring with custom scope, including infostealer logs
- Unlimited remediation rescans
- On-demand scans agreed per contract
- Negotiated volumes of assets, repositories and domains
- Weekly scheduled monitoring across all your assets
- Everything in Scale
- Daily monitoringDaily Monitoring · €300.00 / mês →
- Penetration testingComprehensive Security Assessment · €800.00 / dia →
- Bug hunting — manual testing by a specialistContinuous Bug Hunting · €950.00 / mês →
Serviços
Projetos delimitados entregues pela nossa equipa — pentests, revisão de código, OSINT e mais.
Web Application Penetration Test — Small
A three-day manual test of a single application with one or two user roles and a limited number of flows. Delivered as a report with reproducible findings, severity ratings, and remediation guidance.
- Incluído no preço
- Não — pago à parte
- Retest adicional
- €650.00 — Retests are performed within 90 days of the report and cover only the findings it contains, not functionality added since. One retest is one round: if findings remain open after it, a further round is charged separately. The retest runs in the same environment as the original test.
Web Application Penetration Test — Standard
A five-day manual test of a SaaS product or business application with multiple user roles and an API. Covers authorization between roles, business logic, and the API surface behind the interface.
- Incluído no preço
- Sim — um retest nos 90 dias seguintes ao relatório
- Cobre
- Only the findings reported in the original test. Each is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. Where a fix addresses the symptom rather than the cause, we say so and check whether the vulnerability remains reachable by another path. You receive an updated report and a signed statement of remediation. Functionality added after the original test is not covered.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
Web Application Penetration Test — Complex
An extended manual test of a platform where a single authorization flaw has real consequences: multi-tenant data separation, payment logic, and single sign-on.
- Incluído no preço
- Sim — um retest nos 90 dias seguintes ao relatório
- Cobre
- Two rounds, both covering only the findings reported in the original engagement. Each finding is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. Where a fix addresses the symptom rather than the cause, we say so and check whether the vulnerability remains reachable by another path. Each round produces an updated report, and the final one a signed statement of remediation. Functionality added after the original engagement is not covered.
- Retest adicional
- €650.00 — Both included rounds are used within 90 days of the report. Beyond them, or beyond the window, further retests are charged at €650 per round. Retests run in the same environment as the original engagement.
External Infrastructure Penetration Test
A manual test of your internet-facing infrastructure — up to 10 IP addresses. What is exposed, what is exploitable, and what an attacker reaches from the outside without credentials.
- Incluído no preço
- Não — pago à parte
- Retest adicional
- €650.00 — Retests are performed within 90 days of the report and cover only the findings it contains, not systems or services added since. One retest is one round: if findings remain open after it, a further round is charged separately. The retest covers the same IP addresses as the original test.
Mobile Application Penetration Test
A five-day manual test of one mobile application, iOS or Android, including the backend API it communicates with. Covers what the app stores, what it transmits, and what its API accepts.
- Incluído no preço
- Sim — um retest nos 90 dias seguintes ao relatório
- Cobre
- Only the findings reported in the original test, across both the application and its backend API. Each is confirmed as fixed, partially fixed, or still present, using the same reproduction steps. The retest is performed on a new build you provide; features added since the original test are not covered. You receive an updated report and a signed statement of remediation.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
AI / LLM Application Penetration Test
A five-day manual test of an application built on a language model. Covers prompt injection, data leakage, and what the model is able to do on a user's behalf.
- Incluído no preço
- Sim — um retest nos 90 dias seguintes ao relatório
- Cobre
- Only the findings reported in the original test. Each is confirmed as fixed, partially fixed, or still present. For this class of vulnerability, the retest also states which findings have been mitigated by controls and which remain residual risk by design — prompt injection cannot always be eliminated, and we report honestly where a control reduces risk rather than removing it. Model, tooling or prompt changes made since the original test are not covered.
- Retest adicional
- €650.00 — The included retest is one round. If findings remain open after it, or if you need verification after the 90-day window, a further retest is charged at €650 per round. Retests run in the same environment as the original test.
Remediation Retest
A specialist verifies that the vulnerabilities found in your penetration test are actually fixed, and issues an updated report reflecting your current state.
- Incluído no preço
- Não — pago à parte
- Retest adicional
- This service is itself a retest. It verifies the findings of a previous 4Tify engagement, within 90 days of the original report, and covers one round. Further rounds are booked as additional units of this service.
Manual Secure Code Review
A specialist reads your code the way an attacker would, finding the flaws that only appear when you can see the logic behind the interface.
Bug Hunting Sprint
Three days of unstructured manual hunting on your live application. No checklist, no methodology to complete — a specialist looking for the one thing nobody thought of.
Continuous Bug Hunting
A specialist working on your application every month, who knows it well enough to spot what changed and where the new risk went.
OSINT Exposure Investigation
A specialist maps everything publicly discoverable about your organization and up to five key people — and everything already leaked about you in breach data and criminal marketplaces.
Comprehensive Security Assessment
Every layer examined in one engagement — application, code, infrastructure, exposure — and a single answer to the question your board is actually asking: how exposed are we, and what do we do first?
Extras
Amplia qualquer subscrição — scans, ativos, utilizadores ou capacidades extra.
Additional Asset
Add one more asset to your plan at any time. Each asset is scanned on your weekly schedule and counts toward your on-demand scans.
- Scan de site / app+1 domínio
Additional Repositories (pack of 10)
Extend code scanning to 10 more repositories. Each one is scanned weekly for vulnerabilities, vulnerable dependencies, and exposed secrets.
- Scan de código-fonte+10 repositórios
Additional Monitored Domain
Extend attack surface discovery and dark web monitoring to one more root domain. Includes all subdomains discovered under it.
- Monitorização dark web+1 domínio
Monitored Identity
Monitor one individual's work identity for leaked credentials and personal data appearing in breach data and criminal marketplaces.
On-Demand Scan Pack (10 scans)
Ten extra scans you can trigger whenever you want, on top of your plan's monthly allowance. Remediation rescans remain unlimited and are never counted.
- Scan de site / app10 × de utilização única
Additional User
Add one more person to your organization's account, with the role and permissions you assign.
- Membros da equipa+1
Extended Data Retention
Add 12 months to your plan's retention period. Keep scan history, reports, and score evolution available for longer.
- Retenção de dados+12 meses
AI Remediation Assistant
Turn each finding into a concrete fix for your stack: the affected code or configuration, the change to make, and how to verify it worked.
ServiceNow Integration
Push findings into ServiceNow as incidents or change requests, with status synchronized back into 4Tify.
White-Label Portal
Deliver 4Tify to your own clients under your brand, on your own domain, with your logo and colors.
Daily Monitoring
Move your scheduled monitoring from weekly to daily, with results delivered every morning.
Dedicated Environment
Run 4Tify on infrastructure reserved for your organization alone, in the region you choose.
Onboarding profesional
A guided setup session with a 4Tify specialist. Your assets, repositories, integrations and workflow configured with you, not left to documentation.
Cada projeto é adaptado ao teu ambiente · IVA não incluído.
Perguntas, respondidas.
Os planos são um ponto de partida. Cada projeto é adaptado ao teu ambiente, por isso o valor final reflete os teus ativos e risco reais — nunca uma surpresa.
Sim — a maioria dos clientes começa pequeno e sobe à medida que a superfície de ataque cresce. Sem lock-in.
Claro. Muitas equipas combinam um pentest pontual com um plano de monitorização sempre ativo. Ajudamos-te a montar a combinação certa.
Sempre. Os nossos engenheiros integram-se na tua equipa, incorporando proteção e scan contínuo na tua forma de entregar.
Não sabes que plano se adequa?
Marca uma chamada de âmbito sem compromisso — cartografamos a tua superfície de ataque e recomendamos o ponto de partida certo.
Fala com um especialista