Base
$8,000
Covers up to five in-scope IPv4 addresses for the full annual term.
PRICING // ENGAGEMENT TERMS
Autonomous Penetration Testing
Pay once. Tested all year.
Most penetration tests are a single point-in-time snapshot. One Chelys fee covers an annual engagement window with up to three scans a month — so your systems are re-tested as they change, not once a year.
[ Core engagement ]
Autonomous swarm assessment Annual Term · 365 Days
$8,000 flat · annual term
up to 5 IPv4 addresses
up to 5 IPv4 addresses
Up to 5 IPv4 addresses / up to 3 scans per month / 365-day coverage
- Autonomous swarm — live attack graph, real exploit chains, not a CVE list
- Up to 3 scans per month, run on demand
- Safety Oracle-gated — no disruption to operational infrastructure
- Secure PDF report + optional 30–60 min results review
- Severity-rated findings with exploit path and remediation guidance
- Mutual NDA · DPA · Responsible Disclosure · SOC 2-aligned controls
+ $2,000 per additional IPv4 address beyond five. Need to add addresses mid-term? Email help@chelys.io and we'll send pro-rated pricing for the rest of your window. IPv6 is quoted separately.
[ How pricing scales ]
Each additional IPv4
+$2,000
Per IPv4 address beyond the first five, for the term.
Mid-term additions
Pro-rated / on request
Email your extra domains/addresses to help@chelys.io for pricing across the remaining days. IPv6 quoted separately.
[ Chelys vs. traditional pentests ]
| Chelys | Traditional pentest | |
|---|---|---|
| Price | From $8,000 / annual term | $15K–$100K+ per test |
| Model | Continuous — up to 3 scans/month | One-and-done snapshot |
| Coverage | 12 months (365 days) | Single point in time |
| Turnaround | Most scans within a day, booked on demand | Weeks of scheduling |
| Re-tests | Included across the term | New engagement each time |
| Delivery | Secure PDF + optional review | Varies by vendor |
| Zero-days | Formal CVE / NVD disclosure | Varies by vendor |
[ Getting started ]
- Sign the packet Mutual NDA, Pentest Application, Master Services Agreement, and Data Processing Agreement.
- Invoice & payment We invoice you; payment typically clears within three business days.
- Confirm your slot Once funds clear, we confirm your scan start time by email.
- Scan & review The swarm runs the engagement; we follow up with an optional results review.
[ Pricing questions ]
Pay once and you're covered for up to 12 months (365 days). That window is a live engagement — you can run repeat scans across it as your environment changes, with no rebooking or new quote each time.
Up to three per month across your annual window — so you can re-test after a fix, a deployment, or an infrastructure change rather than waiting for the next annual audit.
IPv4 addresses beyond the first five are $2,000 each for the term. Need to add some mid-window? Email help@chelys.io with the additional domains or addresses and we'll send back pro-rated pricing for the remainder of your term — no waiting for renewal. IPv6 is quoted separately.
Traditional engagements are manual and run $15K–$100K+ for a single snapshot. An autonomous swarm does the assessment work, so we deliver comparable rigor — continuously, across an annual term — without the price tag or the weeks of scheduling.
More questions? See the full Scan FAQ or email help@chelys.io.
Ready to deploy your first assessment?
See how the autonomous swarm maps assets, builds live vulnerability graphs, and isolates exploit paths — without disrupting operational infrastructure.
Initiate Engagement