Simple plans. Cancel any time.

Sign in (accounts are created on first sign-in) and start the trial from your billing page — no card required. You get the full Pro tier for 14 days. At the end nothing is charged: with no payment method on file the trial simply expires and your workspace returns to the Free plan. Everything you set up during the trial — scans, findings, policies, configured integrations — is kept, so subscribing later picks up where you left off. It's one trial per organization, and it covers the Pro tier only.

No — the free scan reads only public DNS records. We never ask for credentials, and we don't store anything that wasn't already in the open. For continuous monitoring we'll add a TXT-record verification step before scheduled scans start.

Yes. Billing is monthly via Stripe; cancel from the Customer Portal inside the app and your access stays active until the end of the period.

No. Your scans are visible only to your organization. Public share links work via an unguessable token you choose to share.

Drift alerts fire immediately when a check transitions (e.g., DMARC goes from p=reject to p=none). The weekly digest is a Monday-morning roll-up of everything that happened in the trailing 7 days.

The Max plan covers up to 50 monitored domains, includes SAML SSO + SCIM provisioning via a guided setup wizard (no IAM engineer required), and ships a dedicated CSM + custom MSA. For more than 50 domains, or for anything still on our roadmap (SIEM streaming, custom trust-page domains) that you need contractually committed before we ship it broadly — email [email protected] and we'll work it out.

Pro now includes everything we've built since the original release: the vendor portfolio with auto-attestation questionnaires, security-awareness training + phishing simulations, the policy library with CMMC / SOC 2 / NIST CSF templates, the public trust page, and every integration. Existing Pro customers were not re-priced.

Both are included on Pro and Max. The Ask Resolute copilot answers from your real posture, and the MCP server lets you connect Claude, Cowork, or any AI agent to read your findings, evidence gaps, and readiness — read-only by default. With explicit consent an agent can attach evidence or file a finding, but every AI write is capped to a partial attestation a human confirms: it can lower a score, never inflate one. The public security-record validators (SPF, DKIM, DMARC, CSP, HSTS) are free and need no account. See the AI & MCP page for the full picture.