Pay for validated findings, not scans.
Mara only surfaces bugs the validator could reproduce in an isolated sandbox. You're paying for signal, not for a long PDF.
Hobby
$0/forever
Community license. Self-hosted, capped at 1 target, 5 scans/mo.
- 1 verified target
- 5 scans / month
- Markdown reports
- Community support
Team
Most popular$499/mo
For internal security + appsec teams. Cloud or self-hosted.
- Up to 25 verified targets
- Unlimited validated scans
- PDF + JSON exports
- Slack + Jira integrations
- SAML SSO
Enterprise
Custom
Single-tenant, customer-managed keys, on-prem option.
- Unlimited targets + orgs
- Single-tenant deployment
- Customer-managed encryption
- SOC 2 + ISO 27001 reports
- 24/7 SRE support