Simple pricing, real coverage

A domain is a single root domain you register with Rimscan (for example, acme.com). Subdomain discovery under that domain is included automatically as part of every scan.

A standard scan passively maps your attack surface — subdomains, DNS records, certificates, and known exposure patterns. A Deep Scan goes further with active testing (crawling and payload-based checks for issues like SQL injection and XSS) to find vulnerabilities that passive scanning can't reach.

Yes. You must own the domain or have documented permission to scan it, such as an active bug bounty program scope or written authorization from the owner. You're responsible for confirming you have the right to scan any target you add.

On the Pro plan, Rimscan automatically checks your targets and re-scans them roughly every 2 days, so new exposures are caught without you having to run scans manually.

Yes. You can upgrade to Pro whenever you're ready, and manage or cancel your subscription anytime from Settings. If you cancel, you keep full Pro access until the end of your current billing period.

Your existing domains stay saved and visible in your dashboard. You won't be able to add new domains beyond the Free plan's limit until you upgrade again, but nothing you've already added is deleted.

Yes. Your scan results and findings are private to your account, isolated from other users, and only accessible through your authenticated session.

Pro is billed securely through Lemon Squeezy, supporting major cards and standard payment methods. You can choose monthly or annual billing at checkout.

Deleting your account through Settings permanently removes your targets, scans, and findings, aside from limited records we may need to retain briefly for security or legal reasons.