FixWeb

// totongi / 2026

Kumi ʻa e ngaahi palopalema kimuʻa pea kumi ia ʻe hoʻo kau ngāue.

Ngaahi sivi DAST + BaaS fakatuʻutāmaki ʻoku hokohoko, kuo fakaʻīkihi ki he ngaahi fakaʻaongaʻanga ʻo e ʻinitaneti naʻe fakatupu ʻe he AI.

// Save hours every week

ʻAtāmai

$9

$6/māhina

Billed $72/yr

  • 1 project
  • 50 scans / month
  • 1 API key
  • 250+ passive checks per scan
  • 100+ active¹ checks per scan
  • MCP & API access
  • 1 webhook endpoint
  • Ngaahi AI fix prompt
  • PDF export
Get started

// Security at scale

Unlimited

$89

$62/māhina

Billed $744/yr

  • 20 projects³
  • Unlimited scans³
  • 20 API keys
  • 250+ passive checks per scan
  • 100+ active¹ checks per scan
  • 40+ GitHub repo² checks per scan
  • MCP & API access
  • 20 webhook endpoints
  • Ngaahi AI fix prompt
  • Scheduled re-scans (≥1h cadence)
  • Live threat detection mo'ui
  • Live threat notification (email)
  • PDF export
  • Dedicated support
Get started

// launch notes

Pricing details teams ask before checkout

Is there a Free plan?
Yes. New accounts start on Free with 3 passive scans per month, 1 project, 7-day retention, and preview-level findings. Upgrade when you need active probes, full evidence, API/MCP access, repo scans, webhooks, or longer retention.
Are outbound webhooks live?
Yes. Paid plans can send signed outbound events for completed scans, failed scans, high-severity findings, monitor alerts, and queued scheduled runs.
Can API or MCP start active scans?
Not today. REST API and MCP can start passive scans only. Active scans stay in the website UI because domain verification and authorization attestation must happen on-site.

Pay only when you find issues. Create account →

1
Active probes run only against domains you have verified ownership of.
2
Repository scans require the FixWeb GitHub App.
3
"Unlimited" subject to fair use — default cap is 20 active-monitoring projects at ≥1h cadence.

USD · Cancel anytime · No setup fees · Ngaahi tuʻutuʻuni

Totongi — FixWeb · FixWeb