Simple, transparent pricing
Start at no cost with the open-source core. Move up a tier when you need the portal, compliance mapping, or a managed fleet.
Plans and pricing
Open source
Self-hosters and evaluators
No cost
Apache-2.0, self-hosted
- Full recon and vulnerability pipeline
- A-to-F risk scoring and white-labeled reports
- Scheduling daemon and Docker image
- Runs standalone, no account needed
Pro
Independent consultants
$99/mo
50 sessions, 5 agents
- Everything in the open-source core
- Hosted collection portal
- Shareable client report links
- Client-scoped session history and trends
Business
In-house security teams
$349/mo
500 sessions, 25 agents
- Everything in Pro
- Compliance mapping (CIS, NIST, PCI, SOC 2, Ohio Revised Code 9.64)
- Benchmarks and remediation tracking
- Webhook integrations
MSP
MSPs and MSSPs
$599/mo
5 client orgs included, then $39/mo each
- Everything in Business
- Multi-agent fleet and command dispatch
- Agent groups, audit log, fleet monitoring
- Unlimited sessions and agents, no overage
Prices in USD. The license gate is soft: a feature above your tier is skipped with a warning, and scans never fail because of licensing.
Compare every tier
| Capability | Open source | Pro | Business | MSP |
|---|---|---|---|---|
| Core scanning, scoring, reporting | Included | Included | Included | Included |
| Runs standalone (no account) | Included | Included | Included | Included |
| White-label reporting | Included | Included | Included | Included |
| Portal upload and download | Not included | Included | Included | Included |
| Shareable report links | Not included | Included | Included | Included |
| Session limit | Local only | 50 | 500 | Unlimited |
| Agent limit | Not included | 5 | 25 | Unlimited |
| Compliance mapping (CIS, NIST, PCI, SOC 2, ORC 9.64) | Not included | Not included | Included | Included |
| Benchmark comparison | Not included | Not included | Included | Included |
| Remediation tracking | Not included | Not included | Included | Included |
| Slack and webhook alerts, webhook subscriptions | Not included | Not included | Included | Included |
| Multi-agent fleet and C2 | Not included | Not included | Not included | Included |
| Agent group management | Not included | Not included | Not included | Included |
| Audit log and fleet monitoring | Not included | Not included | Not included | Included |
The field appliance
A Raspberry Pi 5 with an RTL-SDR in a custom Bullium-built enclosure, preloaded with the scanning daemon and pointed at your portal. Drop it on a segment and it reports back on its own. A natural fit for MSPs running a fleet of always-on field agents.
Built and shipped by Bullium Consulting. Pricing depends on configuration and quantity.
Contact for pricingPricing questions
Is the core really open-source and no cost?
Yes. The scanning engine, risk scoring, and report generation are Apache-2.0 and run with no account or key. Paid tiers add the hosted portal, compliance mapping, fleet management, and support.
How does the license gate work?
It is a soft gate. A feature above your tier prints a warning and is skipped, and a scan never fails because of licensing. The portal enforces tiers server-side, so the client can never lock itself out.
What do I save with annual billing?
Annual billing costs about ten months for a full year, so two months are included at no additional charge on every paid tier.
What counts as a client organization on MSP?
Each tenant or customer network you manage is one client organization. MSP includes five, then adds a low per-organization rate with no overage penalties as your client count changes.
Can I change tiers later?
Yes. Tiers and limits are set per license key and can be adjusted as your needs grow. Contact sales to move between Pro, Business, and MSP.
Get started
Tell us which tier fits and we will get you a license key and onboarding. Prefer to explore first? The open-source core and docs are ready now.
Or email support@bullium.com, or open the collection portal.