.hero Opens in a new tab
Pricing

Choose the plan that fits your needs

Start free on one asset. When you need more, pay per asset, per year, and the price per asset drops as you grow.

Compare plans

Same platform on both. Advanced lifts the limits and is priced by the number of assets you track, billed annually.

Free

The platform on one asset.

$0/year
Tracked assets1
Start for free

Advanced

Every asset you run, for your whole team.

$400/year
Start Advanced
Platform
Findings
Unlimited
Unlimited
Users
3
Unlimited
Teams
—
Unlimited
RBAC
Admin only
Full
Workspaces
1
Unlimited
Audit logs
CVE Watch
Views
1
Unlimited
How pricing works

The more you track, the less each asset costs

Priced tier by tier

Your price is based on the number of assets you monitor. Each group of assets is charged at its own tier, so only the assets above a threshold get the lower price, and adding more never makes the ones you have cost more.

Total, per year$400
FAQ

Everything you need to know

How does Panopsys pricing work?

Two plans. Free gives you the platform on 1 asset, with 1 CVE view. Advanced is usage-based: you commit to the number of assets you need (5 minimum), billed annually, and the price per asset drops as your volume grows.

What does "per asset" pricing mean? Do all my assets cost the same?

No. Pricing is progressive: each group of assets is charged at its own tier. Your first asset is included, assets 2 to 10 cost $100 each per year, assets 11 to 50 cost $75, and so on down to $25 from the 301st. Adding assets never makes the ones you already have more expensive.

What counts as a tracked asset?

Each server, network, network device, web application or API you add to Panopsys. Findings and CVE views don't count toward it: they're unlimited on Advanced.

Can I add assets mid-year?

Yes. Upgrade your subscription at any time: the increase is prorated, and your annual term restarts from the change.

What happens if I reduce my plan or cancel?

Downgrades and cancellations take effect at the end of the billing cycle, so you keep everything you've paid for until the end of the current term. No mid-term refunds and no surprise cutoffs: what you committed to is what you get until the anniversary date.

What happens when I reach my committed asset limit?

Nothing breaks. You just can't add new assets past your commitment, and your existing assets and findings keep working exactly as before. To grow, upgrade your plan (prorated, with your annual term restarting) or free a slot by deleting an asset you no longer track.

Audits: 

Supported technologies:
  • Linux
  • Nginix
  • Apache
  • MySQL
  • PostgreSQL

Views: 
A personalized monitoring lens that tracks a specific group of technologies and their versions. It maps your “stack” against known CVEs to provide targeted risk statistics and automated notifications.

Example: 
You create one 
Custom View for your “Public Web Servers” (monitoring Nginx 1.18 and OpenSSL 1.1.1) and a second Custom View for your “Internal Databases” (monitoring PostgreSQL 13). Each view has its own dashboard and alert settings.

What it is NOT: 
It is not a one-time report: It is a live monitor that stays active.

  • It is not a Patch Tool: It identifies that a version is vulnerable, but it does not automatically update the software for you.

Notifications:

  • Alert: Immediate notification the moment a new CVE is discovered for a technology in your View.
  • Bulletin: A scheduled (weekly/monthly) summary report with a detailed attachment of your View’s security posture.

Audit Logs: 

A complete, timestamped record of every action in the platform: who did what, to which object, and when. When an auditor or a client asks you to prove who changed what, you export the trail instead of reconstructing it.

Workspaces: 
A secure, isolated container that separates data and security operations between different organizations or business units.

Examples:

  • Main Tenant: “Global Corp” (the parent company).
  • Sub-Tenant: “Global Corp – UK Branch” or “Global Corp – Marketing Dept.”
  • MSSP Use Case: An MSSP is the top tenant, and every company they manage is a sub-tenant under them.

What it is NOT:

  • A User Profile: One tenant can have 100 users. Deleting a user doesn’t delete the tenant, but deleting a tenant removes everyone inside it.

RBAC: 

Role-based access control. Create roles with specific permissions and assign them to users so each team member only sees and does what they’re supposed to.

Teams: 

Group users into teams and assign permissions at the team level. Access is managed once per group instead of user by user, new members inherit the team’s rights the moment they join.

Findings: 

Every weakness surfaced by a Panopsys audit or imported from your own tools becomes a finding: a tracked ticket with an owner, a severity, and a lifecycle from Open to Fixed. It’s how a list of problems becomes work you can assign, measure, and prove is done.

Tracked Assets: 
Any digital or physical resource of value that represents a potential target for an attacker.
In simple terms: If it’s important to your business and could be targeted or damaged, it’s an asset. This includes hardware, software, sensitive data, and cloud resources.

Examples:

  • A public-facing IP address or web domain (e.g., api.yourcompany.com).
  • A cloud database containing customer information.
  • An employee laptop or an internal office server.

What it is NOT:

  • A Vulnerability: An asset is the thing you want to protect; a vulnerability (like a CVE) is the hole in that thing.
  • A User: An employee is a user of the system, but their specific workstation or their email account is the asset.