Intruder Review 2026: Vulnerability Scanner Pricing and Fit

Intruder sells the version of vulnerability management a three-person security function can run: it finds what is exposed, scans it continuously, re-scans within hours when a new critical CVE goes public, and files the result in Jira or Slack.

The question for a buyer is not whether it scans well but whether a price that depends on a slider fits a budget that has to be written down in advance.

This review explains the four plans from Intruder's pricing page, uses the one entry price Intruder publishes in prose, works through what a small company's bill depends on, and sets the product against Nessus, Tenable Vulnerability Management, Pentest-Tools.com and Detectify on each vendor's published figures.

The reader is the security lead or IT manager who has been asked for a scanner before the SOC 2 audit and needs a number.

Intruder is a cloud-hosted vulnerability scanner and attack surface management platform. It discovers the assets a company exposes to the internet, runs external, cloud, web application and API scans against them, and on the Pro plan adds agent-based scanning of internal servers and employee devices.

Cloud scanning covers AWS, Azure and Google Cloud with daily configuration checks, and the web application engine runs 75 checks for injection flaws, misconfigurations and zero-days.

Its distinguishing feature is emerging threat scanning: when a critical vulnerability is published, Intruder scans customers for it within hours rather than waiting for the next scheduled run.

Around the scanner sit the things an auditor asks for: continuous monitoring, real-time change detection that scans new assets as they appear, 15 or more integrations including GitHub, GitLab, Jira, Azure DevOps and Slack, and compliance reports for SOC 2, ISO 27001, HIPAA and DORA.

GregAI, the built-in analyst, triages findings and is metered in investigation credits per plan. Intruder also sells AI-assisted web application pentests as a separate per-test line from the subscription. The product profile is on Toolradar.

Setup is a 14-day trial of the Cloud plan with 5 targets, scanned as often as you like, and Intruder says it will extend the count on request. A target is a scanned asset: an IP, a hostname or a web application. The pricing page asks how many you have and prints the Cloud and Pro price for that count, which is why no single list price appears.

For a company that knows its exposed asset count, the calculator takes a minute; for one that does not, the trial's discovery run is the way to find out.

Day to day the platform scans on a schedule, scans again when it detects a change or a new emerging threat, and pushes prioritized findings to the ticketing or chat tool the team already uses. Cloud accounts connect through native connectors, 3 on Cloud and 10 on Pro, with daily configuration checks.

Internal scanning on Pro uses an agent on servers and laptops, so there is no appliance to run. What Intruder does not do is give you a scanner you own: there is no on-premises engine, no unlimited-IP license and no offline use, which is the trade a Nessus buyer makes in the other direction.

Intruder's plans were checked on the Intruder pricing page on October 17, 2026, in US dollars exclusive of VAT. The page lists four plans: Free at $0 forever, Cloud, Pro and Enterprise. Cloud and Pro are priced by a target-count selector rather than a printed list, and annual billing saves 20%; Pro and Enterprise also carry a multi-year discount. The one figure Intruder prints in prose is on its comparison page: the Cloud plan, which is what the free trial gives you, starts at $153 a month. Pentest services start at $3,500 per test.

What that means for a budget: at the entry target count, Cloud costs $1,836 a year on monthly billing and, with the 20% annual discount, $1,468.80 a year, both computed from the stated entry price. Above the entry count the slider sets the price, so a 40-target company should run the calculator before quoting a number to finance, and a company that needs internal scanning or more than 3 cloud accounts should price Pro the same way. Check the current price on Intruder's site for your own target count; this page cannot print a Pro list price because the vendor does not.

Alternatives, from each vendor's own page the same day: Tenable Nessus Professional is $4,790 for one year, $9,330.95 for two and $13,637.54 for three, with Advanced Support at $400 and Nessus Expert at $6,790 a year; Tenable Vulnerability Management shows $3,500 a year for 100 assets, $6,825 for two years and $9,975 for three; Pentest-Tools.com NetScan starts at $96 a month for 16 assets, AppScan at $140 a month for 5 assets and Exploit at $190 a month for 5 assets, with yearly billing priced as 10 months; Detectify Standard is €2,500 a year, Professional €5,000 and Enterprise €15,000, priced in euros, with surface monitoring and application scanning charged per domain and per target on top. Toolradar data: Toolradar, the software directory we run, evaluated 19 vulnerability scanning tools for its October 2026 vulnerability scanning ranking; Intruder is one of the 4 top-10 picks with a free plan, alongside paid-only Nessus, Qualys and Tenable.

Intruder fits a company of 20 to 500 people with public web applications, cloud accounts and a security function of one to three people who cannot babysit a scanner.

It suits a startup heading into a SOC 2 or ISO 27001 audit that needs continuous scanning evidence and a ticket trail, an MSP-less IT manager who wants Slack alerts rather than a console, and any team that has been burned by learning about a critical CVE from a customer.

If your exposed assets are a few dozen targets and the budget can absorb a calculator price, the Cloud plan is the easy choice and the Free plan is a real starting point.

Who should skip it: a team that wants to own its scanner and scan unlimited IPs on an internal range, which is Nessus Professional's job; a large estate where per-asset pricing on Tenable Vulnerability Management is easier to forecast than a slider; and a company that needs a printed per-asset price on a purchase order today, which Pentest-Tools.com provides on every plan.

Intruder is also not a pentest replacement: its own pentest line is a separate per-test fee, and our penetration test cost guide covers what that buys elsewhere. See the wider field in our best vulnerability scanners ranking.