# Lockpick pricing

> Pricing is launching soon. During the free pilot every account gets 3 Pulse runs and 3 Deep runs a month on one site. Rechecks count as runs.

Every plan works in credits. A Pulse costs 1 credit and a Deep scan costs 10. Start free on one site and move up when you need more sites, teammates or agents that start runs.

Plan catalogue 2026-09-24. Prices are in US dollars per month. Paid plans are not open yet.

Web version: /pricing

## Plans

| Plan | Monthly | Yearly, per month | Credits a month | That's about | Sites | Seats | Scheduled scans | Agent access (CLI, MCP, skills) |
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
| Free | $0 | $0 | 100 | 100 Pulse checks or 10 Deep scans | 1 site, swap once a month | 1 seat | Weekly Pulse and weekly Deep | Read reports |
| Solo | $9 | $7 | 1,000 | 1,000 Pulse checks or 100 Deep scans | 10 sites | 1 seat | Daily | Read reports |
| Pro | $29 | $24 | 5,000 | 5,000 Pulse checks or 500 Deep scans | 50 sites | 5 seats | Daily | Read reports and start runs |
| Agency | $99 | $82 | 25,000 | 25,000 Pulse checks or 2,500 Deep scans | 250 sites | Unlimited seats | Daily | Read reports and start runs |
| Enterprise | Custom | Custom | Custom | Custom | Custom | Unlimited seats | Custom | Custom |

### Who each plan is for

- **Free**: For one site you want to keep an eye on. Enough for a daily Pulse on your site plus 7 Deep scans.
- **Solo** (Launching soon): For a founder or freelancer with a handful of sites. Enough for a daily Pulse on 10 sites plus 70 Deep scans.
- **Pro** (Launching soon): For small teams whose agents fix what Lockpick finds. Enough for a daily Deep scan on 16 sites.
- **Agency** (Launching soon): For agencies that check sites for their clients. Enough for a daily Deep scan on 80 sites.
- **Enterprise** (Launching soon): For companies that need custom volume, terms or a dedicated worker. Sized to the sites you need to cover.

## What things cost

Runs are charged in credits. Reading your results is always free.

| Action | Credits | Notes |
| --- | --- | --- |
| Quick check | 0 | The check on our home page. No account, its own daily limits. |
| Pulse | 1 | Checks your public pages, headers, DNS and certificate history. |
| Deep scan | 10 | Needs DNS or file proof that you control the site. |
| Recheck | Same as the run | Runs the same depth again to confirm a fix. |
| Scheduled scan | Same as the run | Charged when it runs. Pauses, never fails, when credits run short. |
| DNS "Check again" | 0 | Rereads the public record behind a DNS finding. |
| CLI and MCP reads | 0 | Your agent reads reports and findings as often as it needs. |
| Break-in test | Not priced yet | Priced in credits once it launches. |

## What changes between plans

Every plan gets the same checks and the same reports. These are the things that change.

| Feature | What it means | Free | Solo | Pro | Agency | Enterprise |
| --- | --- | --- | --- | --- | --- | --- |
| Credits a month | Credits pay for runs. A Pulse costs 1 and a Deep scan costs 10. | 100 | 1,000 | 5,000 | 25,000 | Custom |
| Sites | A site is one domain with all of its subdomains, so www and app count once. | 1 site, swap once a month | 10 sites | 50 sites | 250 sites | Custom |
| Seats | Teammates share one workspace and one credit balance. | 1 seat | 1 seat | 5 seats | Unlimited seats | Unlimited seats |
| Scheduled scans | Schedules run on their own and spend credits each time they run. | Weekly Pulse and weekly Deep | Daily | Daily | Daily | Custom |
| Top-ups | Paid plans can buy more credits in $5 steps when a month runs short. | No | $5 buys 1,000 credits | $5 buys 1,500 credits | $5 buys 2,500 credits | Custom |
| Credit rollover | Monthly credits expire at the end of the month, except on Agency. | No | No | No | 1 month | Custom |
| Agent access | Every plan lets your coding agent read reports. Pro and above will also let it start runs. | Read reports | Read reports | Read reports and start runs | Read reports and start runs | Custom |
| Release gate | A CI step that fails a build when a preview URL has new high findings. | No | No | Yes | Yes | Yes |
| Client workspaces | A workspace per client, with share pages that carry your name instead of ours. | No | No | No | Yes | Yes |
| Queue priority | When the scanner is busy, priority runs start first. | Standard | Standard | Priority | Priority | Dedicated worker option |
| Support | How you reach us when something looks wrong. | Community | Email | Email | Priority email | Dedicated |
| Break-in test | The hands-on break-in test has a waitlist today. Paid plans will pay for it in credits. | Waitlist | Waitlist | In credits, when launched | In credits, when launched | Included allowance |

## Questions

### What is a credit?

A credit is what a run costs. A Pulse costs 1 credit and a Deep scan costs 10. A recheck costs the same as the run it repeats, and a scheduled scan is charged when it runs. The quick check, DNS "Check again" and agent reads cost nothing.

### Do unused credits roll over?

No. Monthly credits arrive at the start of each billing month and expire at its end. Agency carries unused credits over for one month. Top-up credits last as long as your paid plan is active.

### What happens when I run out?

New runs wait until your credits renew at the start of the next month. Scheduled scans pause instead of failing. Your sites, reports and history stay exactly where they are. On a paid plan you can add a top-up.

### What counts as a site?

One domain and all of its subdomains. example.com, www.example.com and app.example.com are one site. Addresses on shared hosting, such as acme.vercel.app and other.vercel.app, count as separate sites. Free lets you swap your site once a month.

### Can I scan a site I don't own?

No. A Deep scan needs proof that you control the site, through a DNS record or a file on the site. A Pulse needs you to confirm that you own the site or have permission to test it. Free covers one site, so an account cannot be pointed at a list of other people's sites.

### Do you run AI against my site?

No. Pulse and Deep make ordinary web requests within fixed limits and read public records such as DNS and certificate logs. No AI model runs against your site.

### Am I charged for a run that fails?

No. If a run fails on our side before it produces a report, or your site blocks it at the first request so nothing could be checked, the credits go back to your balance and the run shows as not charged.

### Can I pay for a plan today?

Not yet. Paid plans are opening soon and nothing on this page takes payment. Free needs no card.