ASM / CTEM Pricing
Pricing, features, and real sample reports — all published here, on this page.
Plans
What each plan does
ASM automates discovery and monitoring; CTEM adds validation, remediation, and reporting. Here is exactly what's in each.
ASM $290/mo Find, monitor, and rank by risk Includes 3 domains / 5 users (unlimited subdomains) Start free for 14 days | CTEM $490/mo Prove it, drive the fix, report to the board Includes 3 domains / 5 users (unlimited subdomains) Start free for 14 days | |
|---|---|---|
| Asset discovery & continuous monitoring (diff tracking) | ||
| Vulnerability detection & risk rating (TER: S/A/B/C/D) | ||
| AI remediation guidance (read the bundled fix advice) | ||
| Notifications, API / MCP | ||
| Active validation — AI actually checks if it is exploitable | — | |
| Remediation task workflow (owner / due date / status) | — | |
| Business-impact grouping & ownership | — | |
| Asset weighting & executive summary | — |
Billing
How pricing works
Pricing is per domain. Everything under a registered domain is included, no matter how wide it grows.
Billed per domain
Register one domain. Three domains and five users are included in the base price.
Unlimited subdomains
Every subdomain found under a registered domain is monitored at no extra charge, with no cap.
Cheaper as your surface grows
Because billing is per domain, adding subdomains never changes the price. The broader your attack surface, the lower your effective per-asset cost.
Add-ons
| Item | Price |
|---|---|
| Additional domain (ASM) | $75/mo |
| Additional domain (CTEM) | $125/mo |
| Additional user | $25/mo |
All prices are per month in USD, excluding tax.
Which plan
ASM or CTEM?
- Want to find and monitor →ASM is the right fit. It finds your attack surface, monitors it, ranks issues by risk, and lets you read the AI remediation guidance.
- Need proof, evidence, and deadlines →CTEM is the right fit. AI actually checks whether issues are exploitable, drives remediation by owner and due date, and rolls up into an executive summary.
- Not sure? →Start with ASM and upgrade to CTEM anytime.
Why PentaTrail
Finding isn't protecting.
From discovery to validation, remediation, and board-level reporting — done with AI. That's why we can publish pricing and features in full.
Pricing, features, and real sample reports — all visible on this page
Per-domain pricing. Monitor any number of subdomains; the wider your surface, the lower the cost
We don't stop at discovery — AI actually checks whether it's exploitable
Bundle many findings by fix approach into a few clear tasks. Manage by owner and due date, up to executive reporting
FAQ
Frequently Asked Questions
How much is ASM?
ASM is $290/month. It includes 3 domains and 5 users; every subdomain found under a registered domain is monitored at no extra charge, with no cap. Each additional domain is $75, and each additional user is $25.
What's the difference between ASM and CTEM?
ASM ($290/month) covers attack-surface discovery, continuous monitoring, risk rating, and reading the AI remediation guidance. CTEM ($490/month) adds AI active validation, remediation task workflow (owner, due date, status), business-impact grouping and ownership, and an executive summary.
How much is CTEM?
CTEM is $490/month. It includes 3 domains and 5 users, with unlimited subdomains monitored underneath. Each additional domain is $125, and each additional user is $25.
How many subdomains can I monitor?
There is no cap. Billing is per domain: register one domain and every subdomain found under it is monitored at no extra charge. The wider your attack surface, the lower your per-asset cost. You can work out your total from the prices on this page alone ($290 + $75 per additional domain).
Can I see pricing before signing up?
Yes. ASM $290 and CTEM $490, along with included quantities, add-on fees, and the feature differences, are all on this page.
Is there a free trial?
Yes, a 14-day free trial is available (credit card required).
Last updated: 2026-07-08