Simple, transparent pricing
Start at no cost with the open-source core. Move up a tier when you need the portal, compliance mapping, or a managed fleet.
Plans and pricing
Open source
Self-hosters and evaluators
No cost
Apache-2.0, self-hosted
- Full recon and vulnerability pipeline
- A-to-F risk scoring and white-labeled reports
- Scheduling daemon and Docker image
- Runs standalone, no account needed
Pro
Independent consultants
$129/mo
3 agents, 100 stored sessions
- Everything in the open-source core
- Hosted collection portal
- Shareable client report links
- Client-scoped session history and trends
Business
In-house security teams
$399/mo
15 agents, 750 stored sessions
- Everything in Pro
- Compliance mapping (CIS, NIST, PCI, SOC 2, Ohio Revised Code 9.64)
- Benchmarks and remediation tracking
- Webhook integrations
- Remote command dispatch to your agents
MSP
MSPs and MSSPs
$699/mo
40 agents, 3,000 stored sessions
- Everything in Business
- Multi-agent fleet console and multi-tenant reporting
- Agent groups, audit log, fleet monitoring
- 5 client orgs included, then $39/mo each
Prices in USD. The license gate is soft: a feature above your tier is skipped with a warning, and scans never fail because of licensing.
Compare every tier
| Capability | Open source | Pro | Business | MSP |
|---|---|---|---|---|
| Core scanning, scoring, reporting | Included | Included | Included | Included |
| Runs standalone (no account) | Included | Included | Included | Included |
| White-label reporting | Included | Included | Included | Included |
| Portal upload and download | Not included | Included | Included | Included |
| Shareable report links | Not included | Included | Included | Included |
| Stored sessions | Local only | 100 | 750 | 3,000 |
| Agents | Not included | 3 | 15 | 40 |
| Compliance mapping (CIS, NIST, PCI, SOC 2, ORC 9.64) | Not included | Not included | Included | Included |
| Benchmark comparison | Not included | Not included | Included | Included |
| Remediation tracking | Not included | Not included | Included | Included |
| Slack and webhook alerts, webhook subscriptions | Not included | Not included | Included | Included |
| Command dispatch to individual agents | Not included | Not included | Included | Included |
| Multi-agent fleet and console | Not included | Not included | Not included | Included |
| Agent group management | Not included | Not included | Not included | Included |
| Audit log and fleet monitoring | Not included | Not included | Not included | Included |
| Remote agent upgrade and restart | Not included | Not included | Included | Included |
| Remote config, log level, and alert thresholds | Not included | Not included | Included | Included |
The field appliance
A Raspberry Pi 5 with an RTL-SDR in a custom Bullium-built enclosure, preloaded with the scanning daemon and pointed at your portal. Drop it on a segment and it reports back on its own. A natural fit for MSPs running a fleet of always-on field agents.
Built and shipped by Bullium Consulting. Pricing depends on configuration and quantity.
Contact for pricingAlready invoiced for an installation? Book your remote installation session.
Pricing questions
Is the core really open-source and no cost?
Yes. The scanning engine, risk scoring, and report generation are Apache-2.0 and run with no account or key. Paid tiers add the hosted portal, compliance mapping, fleet management, and support.
How does the license gate work?
It is a soft gate. A feature above your tier prints a warning and is skipped, and a scan never fails because of licensing. The portal enforces tiers server-side, so the client can never lock itself out.
What do I save with annual billing?
Annual billing costs about ten months for a full year, so two months are included at no additional charge on every paid tier.
What is a stored session, and what happens at the cap?
A stored session is any scan session kept in the portal. Each tier includes a quota of stored sessions; delete sessions you no longer need to stay under it, or add a pack. At the cap the portal refuses new uploads only: agents keep polling, heartbeats keep landing, and every stored session stays readable and shareable.
How do I add agents or sessions without changing tier?
Agents are added one at a time: $15 per agent per month on Pro, $12 on Business, $10 on MSP. Stored sessions come in packs: 50 for $10 per month on Pro, 250 for $20 on Business, 500 for $25 on MSP. Contact sales and the limits on your key are raised the same day.
What counts as a client organization on MSP?
Each tenant or customer network you manage is one client organization. MSP includes five, then adds $39 per month for each additional organization.
Can I change tiers later?
Yes. Tiers and limits are set per license key and can be adjusted as your needs grow. Contact sales to move between Pro, Business, and MSP, or to add agents and stored-session packs to your current tier.
Get started
Tell us which tier fits and we will get you a license key and onboarding. Prefer to explore first? The open-source core and docs are ready now.
Or email support@bullium.com, or open the collection portal.