Overview

ImmuniWeb is a security platform covering applications, APIs, mobile apps and infrastructure, with distinct products for scanning, penetration testing and exposure monitoring. It suits teams that need several of those capabilities across existing web, API and mobile targets. Its breadth is a strength, but Discovery and penetration testing carry substantial costs and commitments.

The no-cost Community Edition is a useful starting point for basic online checks, while paid Neuron subscriptions suit teams that need repeated scans of a defined app or target. Organizations looking for only a lightweight, open-source web scanner may find ImmuniWeb broader and more costly than they need.

Key features

Scanning and testing

Neuron scans web applications and APIs, including authenticated and scheduled scans, JavaScript crawling, patch verification and OWASP vulnerability checks. Its subscriptions allow unlimited scans of the same app or target, making repeat checks practical without a per-scan quota. MobileSuite tests mobile apps and can include their backend APIs or web services. On-Demand provides web and API penetration testing with compliance-oriented reports and remediation assistance; it is a distinct, per-test purchase rather than an extension of the recurring scan subscription.

Discovery and integrations

Discovery brings together attack-surface management, continuous security monitoring, third-party risk management, dark-web monitoring and cyber-threat intelligence. Packages include dashboard and API access, PDF and XLS exports, JSON through a REST API, and 24/7 expert assistance. Integrations include GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, Asana, Jira, Slack, Splunk, Okta and Microsoft Teams. Discovery addresses monitoring requirements across frameworks including GDPR, DORA, NIS 2, HIPAA, ISO 27001, SOC 2 and PCI DSS; the company also lists ISO/IEC 27001:2022 among standards addressed on its product pages.

The Community Edition offers no-cost online tests for SSL, email security, website security and privacy, mobile app security, and dark-web and threat exposure. That makes it a low-barrier option for initial checks, but it is not a substitute for the paid scanning subscriptions or scoped penetration tests.

Pricing

Neuron subscriptions are priced per app for mobile or per target (FQDN) for web/API, with unlimited scans of that same app or target:

ImmuniWeb Neuron Mobile — Monthly Scan Subscription: 395.00 EUR per month.
ImmuniWeb Neuron — Monthly Scan Subscription: 395.00 EUR per month.
ImmuniWeb Neuron Mobile — Annual Scan Subscription: 595.00 EUR per year.
ImmuniWeb Neuron — Annual Scan Subscription: 595.00 EUR per year.

The annual prices are lower than a year of monthly billing, while retaining unlimited scans of the subscribed app or target. The per-app and per-target billing boundaries matter for teams covering multiple applications or FQDNs.

Discovery subscriptions are billed monthly but have a standard one-year duration. Each covers up to 10,000 assets and/or incidents per company, with additional assets priced flexibly:

Dark Web package: 1495.00 EUR per month.
ASM package: 1495.00 EUR per month.
Corporate Pro package: 2495.00 EUR per month, including 25 TPRM vendors.
Ultimate package: 4495.00 EUR per month, including 100 TPRM vendors.

The higher Discovery tiers make sense when third-party vendor coverage is part of the need; the one-year term and asset cap make these plans a poor fit for short evaluations or small, tightly bounded programs.

On-Demand penetration tests are billed once per test, which may cover one or several domains, subdomains or APIs. Corporate Pro is 5995.00 EUR per once; Ultimate is 14995.00 EUR per once. Community Edition is free, with no-cost online tests rather than a published recurring subscription. Custom pricing applies to plans without a fixed price.

Platforms

ImmuniWeb supports Android, iOS, web and API targets, and deployment is hybrid. The mix suits organizations that need application and API coverage alongside mobile testing rather than a single-platform scanner.

Who it's for

ImmuniWeb is a strong fit for security teams that need recurring authenticated web/API scans, mobile app testing, or monitoring across external assets and third-party vendors. Teams with continuous checks benefit from Neuron’s unlimited scans per subscribed app or target. Discovery is better suited to organizations able to commit for a year and manage up to 10,000 assets or incidents per company; the higher packages are relevant where vendor-risk counts of 25 or 100 matter.

SMEs, colleges, universities and small municipal governments can use Community Edition for no-cost cybersecurity, privacy and compliance checks. Teams needing a one-off independent test can buy On-Demand, while those seeking a narrow open-source scanner or a subscription for many targets at a low per-target price should compare alternatives.

Pros and cons

Pro: Neuron subscriptions include unlimited scans per app or target, supporting repeated checks without scan-credit limits.
Pro: Coverage spans web, API and mobile testing, with backend API testing available for mobile apps.
Pro: Discovery packages combine exposure monitoring and third-party risk features with API access, exports and 24/7 expert assistance.
Con: Discovery requires a one-year standard subscription, even though prices are expressed monthly.
Con: Neuron is billed per app or FQDN, so broad coverage across many targets can multiply subscription costs.
Con: On-Demand penetration testing starts at 5995.00 EUR per once, placing it beyond many small teams’ budgets.

Alternatives

For API scanning at a lower entry price, Pentest-Tools.com API Scanner offers a freemium model and a NetSec plan from 95.00 USD per month with five assets; its price varies by asset count and billing cycle. ZeroThreat is a freemium alternative with five sign-up scan credits valid for 15 days, then one scan credit per month for one target per account. Beagle Security may suit teams wanting a limited free monthly test and surface scan reports, or an Essential plan at 99.00 USD per month billed annually.

Teams that prioritize a free, open-source scanner can consider OWASP ZAP, which is free and open source, or Wapiti, a free and open-source scanner under GNU GPL version 2. For a paid scanner with a free trial but no free plan, Astra Security offers Scanner Lite at 69.00 USD per month for one target and three monthly scans, or Scanner at 199.00 USD per month for one target and unlimited scans. Escape uses custom pricing scoped to the environment and is available through AWS Marketplace or channel partners. AppCheck offers scalable licence models with unlimited users and unlimited, continuous scans.

For category comparisons, browse Web Application Security Scanners, Attack Surface Management Software and Security Ratings Software.

Verdict

Choose ImmuniWeb when your team needs a connected mix of recurring web/API scans, mobile testing, penetration testing and exposure monitoring, and can match each product’s per-target billing or annual Discovery commitment to its scope. Its strongest case is breadth paired with unlimited repeat scans on subscribed targets. Look elsewhere if you need only a low-cost scanner, open-source tooling, or broad coverage without per-app/per-FQDN charges or a year-long Discovery term.

	Aftra	ImmuniWeb
Free plan	No	No
Free trial	No	No
Paid from	—	€49.58/mo
Open source	No	No
Platforms	Web	Android, api, iOS, Web
Free plan	No	Yes
External asset discovery	Yes	—
Monitoring frequency	continuous	—

Aftra vs ImmuniWeb

Aftra

ImmuniWeb