Pricing · Licensing
Three plans, each including everything below it
No limit on clients or projects on any plan.
Starkhound
The complete platform to run offensive security projects.
Projects, clients and assets in one place
Findings with severity, CVSS and evidence, with filters and labels
CSV and Excel import and export
Versioned reports with your own templates, exportable to Word and HTML
Finding templates, checklists and standard compliance frameworks
Calendar, planning and reminders
Work teams assigned per project
Client portal with two-factor auth and work requests
Audit log
Up to 5 internal users
Starkhound Pro
Everything in Starkhound, plus the intelligence to prioritise risk and prove compliance.
Everything in Starkhound, plus
Unlimited internal users
Native import from vulnerability scanners
Ticketing and ITSM connectors
Automations: rules that act on findings by themselves, up to 10 active
Attack Chains: editable attack graph
Live vulnerability intelligence: public exploits and known active exploitation
Full risk graph per client
Decision Intelligence: indicators and metrics for management and the CISO
Supply chain: each organization's suppliers, with their evidence and the demonstrated risk they bring
Custom compliance frameworks
Starkhound Advanced
Everything in Pro, plus corporate control for MSSPs and large teams.
Everything in Pro, plus
Corporate SSO (SAML2)
Headquarters and branches: organisations grouped in up to 3 levels, with figures and access that include them
Connector to the CRM
Automations with no limit on active rules
Integration with AI assistants and agents
Ideal for multi-client MSSPs
| Feature | Starkhound | Starkhound Pro | Starkhound Advanced |
|---|---|---|---|
| Management | |||
| Projects, clients and assets | |||
| Findings with severity, CVSS and evidence | |||
| Finding filters and labels | |||
| Calendar, planning and reminders | |||
| Work requests from the client portal | |||
| Internal users | Up to 5 | Unlimited | Unlimited |
| Import and integrations | |||
| Native import from vulnerability scanners | — | ||
| CSV and Excel import and export | |||
| Automations: IF → THEN rules over findings | — | Up to 10 active | No limit |
| Ticketing and ITSM connectors | — | ||
| Connector to the CRM | — | — | |
| Integration with AI assistants and agents | — | — | |
| Reporting and compliance | |||
| Versioned reports with your own templates, exportable to Word and HTML | |||
| Finding templates and checklists | |||
| Standard compliance frameworks linked to findings | |||
| Custom compliance frameworks | — | ||
| Intelligence and prioritisation | |||
| Attack Chains: editable attack graph | — | ||
| Live vulnerability intelligence | — | ||
| Full risk graph per client | — | ||
| Decision Intelligence: indicators for management and the CISO | — | ||
| Supply chain: suppliers, evidence and inherited risk | — | ||
| Security and control | |||
| Client portal with two-factor auth | |||
| Scoped roles and permissions | |||
| Each company in its own database | |||
| Audit log | |||
| Work teams | |||
| Corporate SSO (SAML2) | — | — | |
| Organisations grouped in up to 3 levels | — | — | |
Frequently asked questions
What people usually ask before getting started
Where is my organization's data hosted?
On EU-based infrastructure, built with GDPR compliance in mind.
Is my data mixed with other clients' data?
No. Each company that subscribes to Starkhound has its own database. Inside it, a service provider's clients are kept apart by the database's own rules. A dedicated instance also gives the organization its own server.
Does Starkhound replace my vulnerability scanners?
No. It complements them: it imports findings directly from the existing scanners instead of replacing them.
Can I give a client or an external auditor access without exposing my other projects?
Yes. Guest access is limited to the specific project that person is assigned to.
Which compliance standards does Starkhound support?
From their official sources: the OWASP family (Top 10, ASVS, MASVS, WSTG, API, Mobile, IoT, OT and LLM), CWE Top 25, MITRE ATT&CK and NIST Privacy Framework. ISO 27001, PCI DSS or any other is loaded as a custom standard from Excel. All linked directly to the findings.
How is access to the portal protected?
MFA with replay protection, SSO via SAML2, roles differentiated per person, and every company in its own database.