Pay as you scan (PAYS) - a Burp Suite DAST subscription model - Port Swigger
Summary: PortSwigger introduced pay as you scan (PAYS), a subscription option for Burp Suite DAST that charges an annual license fee plus an hourly rate for each hour of scanning, billed monthly and rounded to the nearest minute. The default monthly scan hour limit is 500, scans that are started run to completion even if they exceed the limit, and a saved credit card is required because payment is taken automatically each month.
What's compelling: A scan that starts will not be stopped partway through, so a long-running scan launched with few hours left can push past the 500-hour monthly cap and onto the bill. If a monthly payment fails twice, PortSwigger temporarily revokes scanning access until the balance is paid.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026