Live webinar: 76% of Your API Traffic Is a Security Blind Spot : Here’s how to Fix It. May 13, 2026, 11:30 AM CEST | 03:00 PM IST.

Register Now →

Home  >  Pricing  >  Indusface WAS 

Indusface WAS Pricing

6500+ Customers trust us for website and API scanning

WEB APPLICATION SCANNING

For volume discounts write to sales@indusface.com

Hide common features
  • Premium
  • Custom/ Custom Billed Annually
  • Custom/ Custom Billed Annually
  • Book a Demo
  • MSSP Edition
  • Custom/ Custom Billed Annually
  • Book a Demo
AcuRisQ - Get a List of Prioritised Vulnerabilities that Pose the Highest Business Risk
Accurate Risk Quantification of vulnerabilities and assets by looking beyond CVSS score and focusing on context of vulnerability reducing vulnreability fatigue and providing priortised list of vulnerabilities that maner
Managed Application Security Scanning
Indusface WAS automatically scans your site for OWASP Top 10, PCI DSS 6.5.x, SANS Top 25 Vulnerabilities and more
Scan Behind Authentication Page
Provide authentication details and have scans be done behind authenticated pages
Remediation Guidance to fix vulnerabilities
Get detailed information on how to fix the vulnerabilities
AA Scan Seal
Application Audit Scan Seal by Indusface
Proof of Concepts
Get proof of concepts for the vulnerabilities, enabling teams to prioritise work on right vulnerabilities
5
Unlimited
Unlimited
Defacement Alerts
Checks your application changes and detects possible defacement changes
Malware Scans
Also detects dead or inactive malware by monitoring external JavaScript and hidden iframes placed on an application
Blacklisting Checks
Ensures blacklisting tracking on popular search engines (Google, Bing, Yahoo) and other platforms
Infrastructure Vulnerability Scans
Identification of OS/Infra level vulnerabilities and all open-ports of infrastructure
Pen-testing by experts
Have experts ethically hack your sites and find business logic vulnerabilities
1
Schedule Automated Scans
Ability to schedule automated scans based on need including daily scans
Add-On
Add-On
Managed 24x7 Support
24X7 unlimited e-mail support. Dedicated on call support during business hours. Prompt response and resolution turnaround time on support query requests
CoBranded Dashboard
White labelled portal with consultant branding to provided to their clients
CoBranded Reports
Reports that can be provided to customers with consultants logo
Role Based Consultant Dashboard
Role Based control to consultant dashboard to effectively manage complex projects across larger teams
Consultant Workflows
Add additional vulnerabilities found through manual pen-testing and other sources seamlessly with a few clicks
WEB APPLICATION SCANNING
Advanced
$59
/App/Month Billed Monthly
Start Free Trial
Premium
Custom
/ Custom Billed Annually
Book a Demo
MSSP Edition
Custom
/ Custom Billed Annually
Book a Demo
Asset Discovery
AI Server(OLLAMA) Exposure
Secret Scan
External Asset Discovery
Asset Discovery of web & mobile apps and API Hosts (Subdomain, IP, Data Center, Site type, TLD).
Unlimited On-demand Scans
Scheduled Auto Discovery
Automated Web Application Security Scanning
AI crawler
Managed Application Security Scanning
Indusface WAS automatically scans your site for OWASP Top 10, PCI DSS 6.5.x, SANS Top 25 Vulnerabilities and more
Full Support of HTML5 , AJAX and JSON
Support to Scan JSON , AJAX and HTML5 based sites
Remediation Guidance to fix vulnerabilities
Get detailed information on how to fix the vulnerabilities
Vulnerability Revalidation Checks
Fix the vulnerabilities and have it quickly revalidated to know if vulnerabilities are properly addressed
Guided scans
Guided Scans can be enabled to ensure automated scans reaches pages that other scans cannot
Guided Authenticated scans
Recorded steps could be automated to perform guided scans.
Authenticated scans
Provide authentication details and have scans be done behind authenticated pages
Proof of concepts
Get proof of concept for the vulnerabilities, enabling teams to prioritise work on right vulnerabilities
 5 Unlimited Unlimited
Automated False Positive Removal
Scan results are manually verified and false positive are removed for Critical & High vulnerability automatically
Pen-testing by experts
Have experts ethically hack your sites and find business logic vulnerabilities
 1
Revalidation Scans
Vulnerability Revalidation checks providing customer option to check that patch is working
Out of Band Vulnerability Detection
Ability to detect vulnerabilities that are determined out-of-band and not based on response to a request
AcuRisQ
Accurate Risk Quantification of vulnerabilities and assets by looking beyond CVSS score and focusing on context of vulnerability reducing vulnreability fatigue and providing priortised list of vulnerabilities that maner
Schedule Automated Scans
Ability to schedule automated scans based on need including daily scans
 Add-On Add-On
Platform Scans
Identification of platform level vulnerabilities
Network Scans
Identification of OS/Infra level vulnerabilities
Open Port Scans
Identification of all Open-ports part of infrastructure
Malware Scans
Advanced Crawler for malware
Advanced Crawler that helps crawl pages through malware scanner to identify malwares
Blacklisting Detection
Ensures blacklisting tracking on popular search engines (Google, Bing, Yahoo) and other platforms
Foreign Link
External URL blacklisting / reputation check helps you to protect your customers from visiting “hacked” or “infected” applications which can potentially transfer malware into your applications
Deterministic Malware Detection
Ongoing monitoring of malware attack vectors and sophistication of newly discovered malware that have been effectively used and deployed by hackers
Defacement Detection
Checks your application changes and detects possible defacement changes
Malware Code Snippet
Also detects dead or inactive malware by monitoring external JavaScript and hidden iframes placed on an application
Continuous Malware & Defacement Scans
Scans done every 30 mins and FPs removed before customer notified incase of defacements
MSSP Features
Multi-tenant Vulnerability Management Platform
Ability to manage multiple tenants and their vulnerabilities on same platform
Consultant Workflows
Add additional vulnerabilities found through manual pen-testing and other sources seamlessly with a few clicks
Quick Report Creation
Automated Report creation along with prefilled information around vulnerability details and remidiations
Editable Database
Ability to edit canned details based on application/project needs including ability to edit CVE, CWEs, PCI DSS and OWASP Categories as required
Vulnerability Management Workflows
Ability to review findings from automated scanner and whitelist them based on business needs
CoBranded Reports
Reports that can be provided to customers with consultants logo
CoBranded Dashboard
White labelled portal with consultant branding to provided to their clients
Import Third Party Scans
Ability to import scan results from third party scans.
Scalable Dynamic Application Scanning
Start multiple parallel scans at the same time for your client’s application and get comprehensive findings in the consultant portable
Role based Consultant Dashboard
Role based control to consultant dashboard to effectively manage complex projects across larger teams
Other features
Centralized Dashboard
Centralized Dashboard for management of vulnerabilities of assets.
Executive Report
Canned reports for executives that gives trends across various assets and actionables
Groups
Ability to create groups and assign assets to various groups based on business needs
Detailed Reports
Detailed asset level reports for various scans.
Multi-User
Ability to create any number of users based on business need
Target Management for users
Ability to assign different assets/groups to various users based on business needs
SIEM Integration
Support of seamless SIEM integration with S3 bucket where scan logs are put
2FA Support
Multifactor authentication for user access to the portal
Flexible Reporting
Ability to create customized reports based on business need and create reporting schedules
SSO
SAML based integration to support single sign on
Trend Graph
Trend graphs across various assets and scans are automatically provided
Role Based Administration
Customizable RBAC to ensure users are provided rights based on need
Support
24X7 unlimited e-mail support. Dedicated on call support during business hours. Prompt response and resolution turnaround time on support query requests

  • Website Scanner
  • API Scanner
WEB APPLICATION SCANNING
Advanced
$59
/app/month billed Monthly
Start Free
Premium
Custom
/Custom billed Annually
Book a Demo
MSSP Edition
Custom
/Custom billed Annually
Book a Demo
  • Website Scanner
  • API Scanner
API Scanner
WAS-API Advance
Start Free Trial
WAS-API Premium
Book a Demo
WAS- API MSSP
Start Free Trial

Indusface is the only cloud WAAP (WAF) vendor with 100% customer recommendation for 4 consecutive years

A Customers' Choice for 2024, 2023 and 2022 Gartner® Peer Insights™

Gartner Peer Insights Customers Choices