Pricing

Pick the depth you need.

Same clear reports, different depth. Start free, upgrade when you need deeper testing.

(2 months free)

Launch offer: code LAUNCH25 takes 25% off the first year of any yearly plan, until 31 Dec 2026.

Insight

Passive OSINT

€0 / month

Non-intrusive reconnaissance from public data.

1 domain
Weekly monitoring
Passive checks
3 AI PDF reports a month

Start free

Assess

Passive + light active

Audit

Full active

€149 / month

The deep tier — for audits, compliance, and legal-grade evidence.

25 domains
Daily monitoring
Deep testing
AI PDF reports on fair use

Enterprise & agencies

Many domains, client reporting, invoicing by bank transfer or a custom testing scope — tell us what you need.

Secure billing via Stripe. Prices in EUR, excluding VAT where applicable. Cancel anytime. Card data handled by Stripe; we never see or store it.

Capability	Insight	Assess	Audit
Domains	1	5	25
Monitoring cadence	Weekly	Every 3 days	Daily
Passive checks	Yes	Yes	Yes
Light active checks	No	Yes	Yes
Deep testing	No	No	Yes
AI-authored PDF reports a month	3	30	Fair use
AI assistants (ChatGPT, Claude, Cursor…)	Yes	Yes	Yes
Price	Free	€49/month	€149/month
Passive OSINT (DNS, TLS, headers, subdomains)	Yes	Yes	Yes
AI-authored PDF report + verification	Yes	Yes	Yes
Email security (SPF/DMARC)	Yes	Yes	Yes
Exposed files / directory listing	No	Yes	Yes
TLS configuration & cookie security	No	Yes	Yes
Port scanning	No	No	Yes
Known-CVE matching (NVD)	No	No	Yes
Vulnerability probes	No	No	Yes
Compliance mapping (KVKK/GDPR/ISO)	Yes	Yes	Yes
Continuous monitoring & alerts	Yes	Yes	Yes
Footer trust badge & status page	Yes	Yes	Yes
Deep internal agents (Bash, PHP, WordPress, .NET/IIS, Node.js, Python, JS)	Yes	Yes	Yes

Need it once?

One-off services.

Deep services like digital forensics and cleanup verification are bought with a single payment. Some are included as a monthly allowance on the Audit plan.

One-off services

FAQ

Questions, answered

Yes. Paid subscribers switch between Assess and Audit from the Stripe billing portal; Insight stays free.

Yes. Plans are monthly or yearly via Stripe and can be cancelled whenever you like from your billing portal.

Yes, on every plan, including the free Insight. TCSR supports MCP, the open standard AI assistants use to connect to other apps, so ChatGPT, Claude, Cursor, VS Code and other compatible assistants can read your domains, scans, findings and reports and, at the level you allow, add and verify domains or start scans. Starting a scan or a report waits for your yes in the chat, and the assistant works within your plan: the same scan depth, number of domains and AI report allowance as in the panel. Payments, plan changes and deleting a domain stay in your account. How to connect your assistant

No — and that's the point. TCSR only scans domains after you prove ownership (DNS, file, meta tag, or WHOIS). Active and deep modules run exclusively against verified assets, so you stay on the right side of the law.

A professional PDF: executive summary, prioritized findings grouped by severity, a security grade, a remediation roadmap, and compliance mapping (KVKK/GDPR/ISO 27001) — plus a public verification reference.

Passive scans return in about a minute; deep audit scans take a few minutes. Reports are generated right after and delivered as a downloadable PDF.

Never. The verification page computes the SHA-256 hash entirely in your browser using the Web Crypto API. Your file is not transmitted to our servers.

Yes. Once a domain is assessed you get a self-updating SVG trust badge for your footer that links to a public status page showing your current grade — without exposing detailed findings.

Enable continuous monitoring and TCSR re-assesses daily, alerts you on changes, and generates a fresh report. You can also schedule the internal agents (Bash, PHP, WordPress, .NET/IIS, Node.js, Python, JS) via cron or a scheduled task.