Lockpick
How it works
Sign inCheck my site

Pricing is launching soon. During the free pilot every account gets 3 Pulse runs and 3 Deep runs a month on one site. Rechecks count as runs.

Simple pricing. Checks cost less than you think.

Every plan works in credits. A Pulse costs 1 credit and a Deep scan costs 10. Start free on one site and move up when you need more sites, teammates or agents that start runs.

View as Markdown
Pro: 5,000 credits a month$29 a month
Billing
  • Free

    For one site you want to keep an eye on.

    $0$0/month

    No card neededNo card needed

    100 credits a month

    That's about 100 Pulse checks or 10 Deep scans

    Enough for a daily Pulse on your site plus 7 Deep scans.

    Sites
    1 site, swap once a month
    Seats
    1 seat
    Scheduled scans
    Weekly Pulse and weekly Deep
    Agent access (CLI, MCP, skills)
    Read reports
    Join the free pilot
  • Solo

    Launching soon

    For a founder or freelancer with a handful of sites.

    $9$7/month

    Billed monthly$84 billed yearly

    1,000 credits a month

    That's about 1,000 Pulse checks or 100 Deep scans

    Enough for a daily Pulse on 10 sites plus 70 Deep scans.

    Sites
    10 sites
    Seats
    1 seat
    Scheduled scans
    Daily
    Agent access (CLI, MCP, skills)
    Read reports

    Waitlist opens soon

  • Pro

    Launching soon

    For small teams whose agents fix what Lockpick finds.

    $29$24/month

    Billed monthly$288 billed yearly

    5,000 credits a month

    That's about 5,000 Pulse checks or 500 Deep scans

    Enough for a daily Deep scan on 16 sites.

    Sites
    50 sites
    Seats
    5 seats
    Scheduled scans
    Daily
    Agent access (CLI, MCP, skills)
    Read reports and start runs

    Waitlist opens soon

  • Agency

    Launching soon

    For agencies that check sites for their clients.

    $99$82/month

    Billed monthly$984 billed yearly

    25,000 credits a month

    That's about 25,000 Pulse checks or 2,500 Deep scans

    Enough for a daily Deep scan on 80 sites.

    Sites
    250 sites
    Seats
    Unlimited seats
    Scheduled scans
    Daily
    Agent access (CLI, MCP, skills)
    Read reports and start runs

    Waitlist opens soon

  • Enterprise

    Launching soon

    For companies that need custom volume, terms or a dedicated worker.

    CustomCustom

    Priced to your volumePriced to your volume

    Custom credit volume

    Sized to the sites you need to cover.

    Sites
    Custom
    Seats
    Unlimited seats
    Scheduled scans
    Custom
    Agent access (CLI, MCP, skills)
    Custom

    Waitlist opens soon

Paid plans are not open yet. Nothing here takes payment.

What things cost

Runs are charged in credits. Reading your results is always free.

ActionCreditsNotes
Quick check0The check on our home page. No account, its own daily limits.
Pulse1Checks your public pages, headers, DNS and certificate history.
Deep scan10Needs DNS or file proof that you control the site.
RecheckSame as the runRuns the same depth again to confirm a fix.
Scheduled scanSame as the runCharged when it runs. Pauses, never fails, when credits run short.
DNS "Check again"0Rereads the public record behind a DNS finding.
CLI and MCP reads0Your agent reads reports and findings as often as it needs.
Break-in testNot priced yetPriced in credits once it launches.

What changes between plans

Every plan gets the same checks and the same reports. These are the things that change.

FeatureFreeSoloProAgencyEnterprise
Credits a monthCredits pay for runs. A Pulse costs 1 and a Deep scan costs 10.1001,0005,00025,000Custom
SitesA site is one domain with all of its subdomains, so www and app count once.1 site, swap once a month10 sites50 sites250 sitesCustom
SeatsTeammates share one workspace and one credit balance.1 seat1 seat5 seatsUnlimited seatsUnlimited seats
Scheduled scansSchedules run on their own and spend credits each time they run.Weekly Pulse and weekly DeepDailyDailyDailyCustom
Top-upsPaid plans can buy more credits in $5 steps when a month runs short.No$5 buys 1,000 credits$5 buys 1,500 credits$5 buys 2,500 creditsCustom
Credit rolloverMonthly credits expire at the end of the month, except on Agency.NoNoNo1 monthCustom
Agent accessEvery plan lets your coding agent read reports. Pro and above will also let it start runs.Read reportsRead reportsRead reports and start runsRead reports and start runsCustom
Release gateA CI step that fails a build when a preview URL has new high findings.NoNoYesYesYes
Client workspacesA workspace per client, with share pages that carry your name instead of ours.NoNoNoYesYes
Queue priorityWhen the scanner is busy, priority runs start first.StandardStandardPriorityPriorityDedicated worker option
SupportHow you reach us when something looks wrong.CommunityEmailEmailPriority emailDedicated
Break-in testThe hands-on break-in test has a waitlist today. Paid plans will pay for it in credits.WaitlistWaitlistIn credits, when launchedIn credits, when launchedIncluded allowance

Questions

What is a credit?

A credit is what a run costs. A Pulse costs 1 credit and a Deep scan costs 10. A recheck costs the same as the run it repeats, and a scheduled scan is charged when it runs. The quick check, DNS "Check again" and agent reads cost nothing.

Do unused credits roll over?

No. Monthly credits arrive at the start of each billing month and expire at its end. Agency carries unused credits over for one month. Top-up credits last as long as your paid plan is active.

What happens when I run out?

New runs wait until your credits renew at the start of the next month. Scheduled scans pause instead of failing. Your sites, reports and history stay exactly where they are. On a paid plan you can add a top-up.

What counts as a site?

One domain and all of its subdomains. example.com, www.example.com and app.example.com are one site. Addresses on shared hosting, such as acme.vercel.app and other.vercel.app, count as separate sites. Free lets you swap your site once a month.

Can I scan a site I don't own?

No. A Deep scan needs proof that you control the site, through a DNS record or a file on the site. A Pulse needs you to confirm that you own the site or have permission to test it. Free covers one site, so an account cannot be pointed at a list of other people's sites.

Do you run AI against my site?

No. Pulse and Deep make ordinary web requests within fixed limits and read public records such as DNS and certificate logs. No AI model runs against your site.

Am I charged for a run that fails?

No. If a run fails on our side before it produces a report, or your site blocks it at the first request so nothing could be checked, the credits go back to your balance and the run shows as not charged.

Can I pay for a plan today?

Not yet. Paid plans are opening soon and nothing on this page takes payment. Free needs no card.

Lockpick
PricingTermsPrivacyMethodologySign in

Lockpick assesses public pages you are authorised to test.