AttackForge
The facts below are what the maker publishes about AttackForge, checked and dated. Our editors have not written about it yet.
Plans and prices
From AttackForge's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Pro | $50 a month | 1 security tester · unlimited clients · unlimited projects/month · 3 access-control groups · $50/month |
| Team | $150 a month | 5 security testers · unlimited clients · 5 new projects/month · 5 access-control groups · $150/month |
| Consultancy | $300 a month | 10 security testers · unlimited clients · 10 new projects/month · 10 access-control groups · $300/month |
| SME | $800 a month | 20 security testers · unlimited clients · 20 new projects/month · 20 groups and custom domain · Assets Module, Self-Service API, Flows and AI MCP included · $800/month |
| Enterprise | Priced on request | Unlimited users · dedicated infrastructure or self-hosted · all add-ons included · SLA-backed support · Discuss your Enterprise plan |
The facts
Each one read from AttackForge's own pages, with the date it was checked.
What it does
- AI access
- AttackForge supports MCP connections for AI assistants, with per-user tool permissions and administrator session visibility and revocation.checked 5 Oct 2026
- API
- The Self-Service REST API has more than 150 endpoints and is documented using OpenAPI v3.checked 5 Oct 2026
- Audience
- The pricing page positions Pro for individual practitioners, Team for small pentest teams, Consultancy for medium-sized teams and SME for larger consultancies and growing enterprises.checked 5 Oct 2026
- Hosting and data location
- Enterprise customers can choose an Azure data-center region, and the page lists SaaS or self-hosted deployment.checked 5 Oct 2026
- Integrations
- Named integrations include Jira, ServiceNow, Azure DevOps, Slack, Microsoft Teams, Power BI, Tableau, HackerOne and BugCrowd.checked 5 Oct 2026
- Purpose
- AttackForge manages offensive security testing from planning and execution through reporting, remediation and retesting.checked 5 Oct 2026
- Reporting
- Its ReportGen engine creates branded reports using customizable templates and supports command-line report generation.checked 5 Oct 2026
- Security
- The pricing page identifies AttackForge as SOC 2 Type II certified and says Enterprise can use dedicated infrastructure or self-hosted deployment.checked 5 Oct 2026
- Support
- Enterprise includes SLA-backed support, a dedicated Customer Success Manager, training workshops and onboarding.checked 5 Oct 2026
- Vulnerability imports
- The platform imports findings from tools including Burp Suite, Nessus, Qualys, Rapid7 and Nmap, as well as custom CSV and JSON.checked 5 Oct 2026
- Workflows
- Flows supports event, scheduled and external HTTP triggers, and can automate integrations with systems that expose an HTTP interface.checked 5 Oct 2026
Money
- Plan limits
- The Team, Consultancy and SME plans limit new projects per month to 5, 10 and 20 respectively.checked 5 Oct 2026
- Trial
- The pricing page says every plan includes a fully featured free trial with no credit card required.checked 5 Oct 2026
Alternatives to AttackForge
- 1
Pentesterra
Free planWebAPIExtensionLinux7.7From €23 a month - 2
Kali Linux
Free planOpen sourceAndroidLinuxmacOSSelf-hosted7.6Free plan - 3
OWASP ZAP
Free planOpen sourceAPIExtensionLinuxmacOS7.6Free plan - 4
Dradis
Free planWebAPILinuxmacOS7.1From $3,600 a year - 5
w3af
Free planWebAPILinuxmacOS6.8Free plan - 6
Caido
Free planWebAPILinuxmacOS6.6Free plan