Whitespots Security Portal Pricing Overview

Self-hosted vulnerability management core, without automation rules and enterprise features.

Self-hosted deployment on your own infrastructure, code never leaves your perimeter
License key issued instantly on registration in the Whitespots Store
Manual and scheduled scans across supported asset types
Report import from any supported scanner via UI, terminal or API
Single findings queue with filters, grouping, sorting and bulk actions
Dashboards and severity statistics
Public documentation and community support
No automation rules, no SSO, no enterprise features
Show More

The full automated platform for a small engineering organization. Up to 50 developers and 100 assets. Fixed price per organization.

Up to 50 developers and up to 100 assets
SSO
Pipelineless integration: GitLab, GitHub and Bitbucket webhooks on a whole group or organization, no CI templates and no pipeline edits
Automated scans for code, dependencies, secrets, IaC, domains, containers, hosts and cloud accounts
30+ scanners available out of the box, including commercial tools
Bring your own scanner: custom report parsers for commercial and in-house tools
Auto-validator: custom rules that verify findings and strip false positives
Deduplicator: basic and advanced cross-scanner deduplication rules
Custom CVSS rules and custom severity mapping for risk-based prioritization
Severity-based SLA timers with an owning team assigned per finding
Quality Gate to block releases above an agreed threshold
WRT (Weighted Risk Trend) with configurable risk appetite
Jira integration with two-way webhook, merge request comments, auto-closer
IDE integrations: VS Code, JetBrains family, Cursor and other supported editors
SSO with GitLab, Microsoft and Okta, plus custom roles with granular permissions
Custom reports and export to PDF, CSV and JSON
Show More

The full platform with no limits on users, repositories or assets, plus priority support from the Whitespots team.

No limits on developers, users, repositories, assets or findings
Priority support from the Whitespots engineering team, 24/5
Dedicated messenger channel for fast communication
Video calls and written walkthroughs for your specific cases
Automation content with monthly updates: new validation and deduplication rules
Assistance with custom scanner integration and report parsers
Deployment and upgrade guidance
Developer enablement and onboarding sessions
Show More

Enterprise license with a named engineer, 24/7 coverage and a contractual first-response SLA.

Named dedicated engineer assigned for onboarding and ongoing operation
24/7 coverage for the full term of the contract
Contractual first-response SLA: Critical 1 hour, High 4 hours, Medium 1 business day, Low 2 business days
Hands-on assistance with deployment and integration rollout
Workflow, routing and operational scenario configuration
Scan mode tuning with per-repository, per-domain and per-application scanner sequences
Secure development pipeline build-out with GitHub Actions, GitLab pipelines and other automation
Troubleshooting for integrations, notifications, pipelines and parsers
Authoring of custom rules: validation, deduplication, prioritization, automated finding handling
Ongoing portal enrichment with rules derived from your own findings
Parser configuration for commercial, in-house and third-party scanners
Knowledge transfer to your team, including a documented runbook
Show More

Procurement-driven delivery for regulated, public-sector and multi-entity buyers.

Tender and public procurement purchasing
Delivery and contracting through an authorized local distributor or local legal entity
Price is fixed in local currency
Extended evaluation and demo period
Air-gapped deployment in fully closed network segments
Multi-entity and multi-region deployment
Show More