Glarion

Pricing

One account, a site allowance, no per-site bill

Tools in this category are usually priced per application. That is a sensible model for a company protecting its own product, and the wrong one for an agency looking after twenty of somebody else's. Glarion charges for the account and gives it a number of sites.

Free forever on one siteThe public check, with no account and no card.
Paid from €19 a monthFull scans, scheduling and branded reports.
Cancel in StripeCheckout and cancellation are hosted by Stripe.

The plans

  • Free
    1 site. The public check only — no full scan, no scheduled re-checks, no branded reports.
    No card. Does not expire.
    €0
  • Solo
    5 sites. Full scans, weekly or monthly checks, agency-branded reports.
    For a freelancer or a small studio with a handful of client sites.
    €19/month · or €170 a year, saving €58
  • Studio
    10 sites. Full scans, weekly or monthly checks, agency-branded reports.
    For a growing client list, at the point where five stops being enough.
    €39/month · or €350 a year, saving €118
  • Agency
    40 sites. Full scans, weekly or monthly checks, agency-branded reports.
    For an established team with several retained clients.
    €99/month · or €750 a year, saving €438

Prices exclude VAT. Stripe calculates and adds it at checkout according to your country, so an Italian sole trader budgeting €19 is asked for €23.18 on the last screen. We would rather you read that here than discover it there.

What the paid plans add

Everything below the free line is the same on Solo, Studio and Agency. The only thing that changes between them is how many sites the account may hold.

The full scan
The public check reads what a site publishes. The full scan requests paths the site never advertised and tries known vulnerability fingerprints against them. It costs real compute, it is the part that needs your proof of control, and it is the part that is paid for.
Scheduled re-checks
Weekly or monthly, per site. A schedule is standing authorisation, so it can only be set while control of the domain is proved, and it stops when that proof lapses.
Notification on change
You are written to when a result differs from the one before it. A weekly message saying "still three issues" teaches people to filter the sender, and then the one that mattered goes unread too.
Agency-branded reports
Reports carry your agency's name and logo. They are self-contained HTML documents that make no external requests when opened, and print or save to PDF.

The free plan is a real product rather than a crippled demo, but it is not the scanner. If you only ever need to read what a site publishes, stay on it.

The per-site arithmetic

Because the bill is for the account, the cost of each site falls as you add them. On the yearly price, a full Solo allowance is €34 per site per year; a full Studio allowance is €35; a full Agency allowance is €18.75. Twenty sites on Agency is €37.50 each per year, and the next twenty cost nothing more.

That is arithmetic on the prices above and nothing else. What you charge a client for monitoring, how many of them take it and what your time is worth are your numbers, not ours, and Glarion makes no claim about them.

Questions

What counts as one site?

One domain you have added to the account and proved control of. The allowance counts those domains: one on Free, five on Solo, ten on Studio, forty on Agency. It is read from the plan rather than stored alongside it, so the number enforcing a paid limit cannot drift away from the number you were sold.

Is the free plan a trial?

No. It does not expire and it never asks for a card. It gives you the public check on one site — the certificate, the headers, SPF and DMARC, and whether the site publishes robots.txt and security.txt. It does not include the full scan, scheduling or branded reports.

Do the prices include VAT?

No. Every price on this page excludes VAT. Stripe computes the rate for your country and adds it at checkout: €19 bought in Italy is charged at €23.18.

How do I pay, and how do I cancel?

Checkout and cancellation are both hosted by Stripe, so no card detail reaches Glarion's servers. The same Stripe billing portal — reachable from your account — changes the card, switches plan and cancels. Cancelling stops scheduled checks at the end of the period you have paid for.

What happens when my domain verification expires?

Proof of control lasts 30 days, and it is checked again at the moment a scan runs rather than only when it was queued. If it has lapsed, the scheduled scan is refused and says so, rather than quietly scanning on. The site stays in your account; prove control again and the schedule resumes.

Is there a limit on how often a site can be scanned?

Yes, and it applies on every plan including Agency: six full scans per site per rolling 24 hours. It is not a plan feature to be upgraded past. Enough traffic at one host looks like an attack to that host's provider, and a scanner whose addresses get flagged is worse for every customer than a scanner that says no.

Is a Glarion scan a penetration test?

No, and any tool that tells you otherwise is selling you something. This is recurring automated monitoring with controlled checks and triage, over a defined surface at a defined time. It does not replace a scoped manual test, and the reports say as much.

Can I put Glarion in front of a site I do not own?

The public check, yes — it reads only what the site broadcasts to every visitor and every search crawler. The full scan, no. It runs only after DNS or hosted-file proof that you control the domain, because probing somebody else's site uninvited is the act computer-misuse law was written to describe.

Read next