Pricing that scales with your asset inventory

Common questions

• What counts as an “asset”?
  Any host, container, or cloud resource that appears in your scanner findings. VMs, EC2 instances, containers, network devices.
• Do you store our vulnerability data?
  Finding metadata (CVE IDs, asset identifiers, scores) is stored encrypted in US-region infrastructure. We never store exploit payloads or raw scanner credentials.
• Can I try Vendrsec before committing?
  Yes — we run a 30-day access window with your actual scanner data. Request access and we’ll get you set up within 48 hours.
• What if my asset count grows mid-contract?
  We’ll notify you when you reach 90% of your tier cap. Upgrade is prorated to your billing cycle.
• Does Vendrsec replace our existing scanner?
  No. Vendrsec is not a scanner — we don’t scan your assets and don’t discover CVEs. We read the output from your existing Qualys, Tenable, Wiz, or Crowdstrike deployment and add the prioritization and remediation workflow layer on top. You keep your scanner.