Simple pricing, real coverage

A domain is a single root domain you register with Rimscan (for example, acme.com). Subdomain discovery under that domain is included automatically as part of every scan.

A standard scan passively maps your attack surface — subdomains, DNS records, certificates, and known exposure patterns. A Deep Scan goes further with active testing (crawling and payload-based checks for issues like SQL injection and XSS) to find vulnerabilities that passive scanning can't reach.

Yes. You must own the domain or have documented permission to scan it, such as an active bug bounty program scope or written authorization from the owner. You're responsible for confirming you have the right to scan any target you add.

Rimscan automatically checks eligible targets according to the monitoring interval shown in the current plan comparison.

Yes. You can upgrade to Pro whenever you're ready, and manage or cancel your subscription anytime from Settings. If you cancel, you keep full Pro access until the end of your current billing period.

Your existing domains stay saved and visible in your dashboard. You won't be able to add new domains beyond the Free plan's limit until you upgrade again, but nothing you've already added is deleted.

Yes. Your scan results and findings are private to your account, isolated from other users, and only accessible through your authenticated session.

Supported payment methods and plan options are shown securely at checkout when paid plans are available.

Deleting your account through Settings permanently removes your targets, scans, and findings, aside from limited records we may need to retain briefly for security or legal reasons.