Pricing

One price. Everything included. Nothing gated.

No feature tiers, no per-report charges, no paying extra for the things that make a report defensible. All prices in GBP and exclude VAT.

Firm

£49per tester / month

Billed annually — £588 per tester per year. GBP, excluding VAT.

Request a quote

Import from Burp, Metasploit, CSV, PDF and Markdown

De-duplication across every source in an engagement

CVSS v3.1 scoring with business risk context

Executive report for the board

CDPT-structured technical report

Remediation and closure report

PDF export of every report

CDPT readiness checklist before a report leaves the building

Evidence stored against each finding

Per-client segregated access with client logins

Your logo on the reports you issue

Authenticator-app sign-in for every account

No minimum seats. Unlimited active client programmes, unlimited client logins.

Client users are never charged. Every client you onboard gets logins at no cost.

An active client programme means one client under a live testing and remediation programme in a rolling twelve months.

Working on your own? A single-tester account with one active client programme is free, with every feature above included.

Founding firm price

£39 per tester per month, locked for the life of your account, in exchange for a named case study and monthly product feedback. Available until 31 December 2026.

On the roadmap

These are not built yet and are not part of what you buy today. They are listed so you can see where the product is going, with the period we are aiming at. When they ship they are included in the same price unless marked otherwise.

Branded client portal
Target: Q2 2027
Full white-labelling — colours, typeface, portal and emails
Target: Q2 2027
Claimed-versus-validated remediation tracking
Target: Q1 2027
Assurance summary export
Target: Q2 2027
QA review and release workflow
Target: Q1 2027
Firm findings library
Target: Q2 2027
Attribution removal
Target: Q3 2027
Custom client portal domain
Target: Q3 2027
SSO and API access
Target: Q4 2027

Questions

What counts as an active client programme?: One client under a live testing and remediation programme in a rolling twelve months. A client you tested once eighteen months ago and have not touched since does not count.
Do client users cost anything?: No. Every client you onboard gets unlimited logins at no cost. You pay for testers, nothing else.
How do I move from the free tier to paid?: Ask us and we switch your account over. Nothing is migrated, re-imported or lost — the same workspace simply stops being limited to one tester and one client programme.
What happens to my reports and evidence if I stop paying?: You export it yourself, whenever you like — every engagement, its findings, retests and report history download as a single file from the app. Evidence files are exported for you by the Sentinel42 team on request. We will not hold your data hostage either way.
Can I self-host it?: No. FindingsHub is hosted by Sentinel42 in the UK. Every firm's data is segregated and access is protected by mandatory authenticator-app sign-in.
There's no sign-up button. How do firms get onboarded?: Deliberately. FindingsHub holds live breach evidence, so accounts are created by us. You request a quote, we talk, and we set your firm up with its first administrator account.

Want to see it working first? Read how FindingsHub works.