Free
$0
- Anonymous scan, no signup
- 30-day shareable URL, deletable from the report page
- HTML report only
- Fix preview (step 1 per finding, also public on /checks)
Pricing
Open · paid plans
Score and harden any Linux server. Scanning is free. A single report can be kept for a one-time $5.
$5 report
$5
- One report, kept 3 months from payment or until you delete it
- HTML + PDF download
- No signup required
- An ownership key, shown once, lets you delete the report or later claim it into a Starhold Account
- Full Fix Pack: every fix step per finding, incl. follow-up, edge-case and verification guidance
- Best for "I inherited this box"
If the report fails or isn't what we described, ask within 14 days and we refund it in full. EU and UK buyers keep their legal withdrawal rights.
Solo
$9/mo
- Up to 7 saved servers
- Scheduled re-scans: weekly at most
- HTML report
- Score history and before/after comparison
- Accepted risks: mark a finding as accepted with a reason and an expiry; your score shows both
- Scheduled check-ins without SSH access: a cron job on your server uploads a scan; alert if one is missed
- PDF download of every report in your account
- Full Fix Pack: every fix step per finding, incl. follow-up, edge-case and verification guidance
Cancel any time for a prorated refund.
Pro
$19/mo
- Up to 15 saved servers
- Scheduled re-scans: daily at most
- HTML report
- Score history and before/after comparison
- Accepted risks: mark a finding as accepted with a reason and an expiry; your score shows both
- Scheduled check-ins without SSH access: a cron job on your server uploads a scan; alert if one is missed
- PDF download of every report in your account
- Fleet view: every server on one page, worst score first, with trend
- Score-drop alerts to your own webhook, Slack or Discord, as well as email
- Read API with scoped tokens: scores, history and reports as JSON or CSV, and start scans
- Evidence pack per report: every finding with its CIS Controls v8 safeguards and accepted risks, as CSV and JSON
- Remediation bundle per server: one shell file with the fix steps for its open findings; nothing runs until you name a fix
- Full Fix Pack: every fix step per finding, incl. follow-up, edge-case and verification guidance
Cancel any time for a prorated refund.
Agency
$49/mo
- Up to 50 saved servers
- Scheduled re-scans: daily at most
- HTML report
- Score history and before/after comparison
- Accepted risks: mark a finding as accepted with a reason and an expiry; your score shows both
- Scheduled check-ins without SSH access: a cron job on your server uploads a scan; alert if one is missed
- PDF download of every report in your account
- Fleet view: every server on one page, worst score first, with trend
- Score-drop alerts to your own webhook, Slack or Discord, as well as email
- Read API with scoped tokens: scores, history and reports as JSON or CSV, and start scans
- Evidence pack per report: every finding with its CIS Controls v8 safeguards and accepted risks, as CSV and JSON
- Remediation bundle per server: one shell file with the fix steps for its open findings; nothing runs until you name a fix
- White-label: your name, logo and colour on PDFs and on live client links (read-only, revocable, one per client)
- Full Fix Pack: every fix step per finding, incl. follow-up, edge-case and verification guidance
Cancel any time for a prorated refund.
Enterprise
Running more than 50 servers? Tell me what you need and I'll size a plan for you. No sales calls, no pressure.
Email hello@starhold.devPayments are handled by Polar.sh (merchant of record). VAT included where applicable.