Comparison
Astra vs. HostedScan
Astra sells pentest plans and a DAST scanner. HostedScan is continuous scanning across every target you own, with network, TLS, and port coverage Astra's web scanner does not include.
Try the Premium plan free for 14 days. No credit card required.
At a glance
HostedScan
Astra
Starting price
$468 / year, 5 targets
$1,999 / year, 1 target
Scanners
OpenVAS, Nuclei, ZAP, Nmap, SSLyze; Nessus on Professional
Own scanner, 15,000+ tests
Internal scanning
Included from Premium
No
Trial
14 days, no card
$7 one-week Lite trial
Differences
What sets HostedScan apart from Astra
Every target you own
OpenVAS, Nuclei, Nmap, and SSLyze cover servers and networks alongside ZAP for web. Astra Scanner plans are priced per single web target.
Five targets for less than one
HostedScan Basic is $468 per year for five targets. Astra Scanner is $1,999 per year for one target; Scanner Agency is $4,999 for a rotating pool of five targets with a 30-day cooling period between swaps.
Unlimited scans, any cadence
Scan daily if you want. Astra Scanner Lite caps monthly scans; higher plans lift the cap for the licensed target.
Built for MSPs too
Workspaces per client, white-label reports, and reseller pricing. Astra is sold per customer engagement.
Inside the product
What you get on day one
Add every host, domain, cloud account, and API. Astra licenses one target. Each target carries its own health score and scan history.
Which one fits
Choose HostedScan if
- You have more than one target. Astra Scanner covers one; HostedScan Basic includes five.
- You need servers, networks, and certificates scanned as well as the web app.
- You want scheduled scans with alerts on change.
- You need a risk list across many targets, plus MSP workspaces.
Choose Astra if
- You need a manual pentest with a verifiable certificate.
- You want humans to remove false positives before you see the list.
- You have one critical app and want the deepest testing of it.
- You want a CREST or PCI ASV report from the same vendor.
Capability matrix
Feature by feature
Differences come first. A half circle marks a limited capability, and its note names the limit. Notes about Astra link to their source.
Feature
Scanners
Manual pentest by certified testers
Automated scanning only. No human pentest, no certificate.
Pentest Expert includes a manual pentest by certified experts and two expert re-scans.
SourceNetwork CVE scanning
Greenbone OpenVAS and Nuclei CVE scanning plus Nmap TCP and UDP port scans on every plan, and Tenable Nessus on Professional.
Network and cloud pentests are separate products from the web scanner.
SourceDedicated TLS and port scanners
SSLyze certificate, protocol, and cipher checks on every plan.
No dedicated TLS or port scanner published for the DAST scanner.
Tenable Nessus
Nessus cloud scanning, Nessus scanners for internal networks, and Nessus Agents, all on Professional.
No Nessus.
Human-vetted results
Automated results only. No human review of findings.
Four expert-vetted scans per year on Astra Scanner and Scanner Agency to remove false positives.
SourceCoverage
Internal network scanning
An internal scanner runs inside your network on Premium. Nessus scanners and Nessus Agents on Professional.
SourceNo internal network scanner in the scanner plans.
SourceCloud configuration review
No cloud configuration checks. Cloud accounts are connected only to import targets.
Cloud security review for AWS, GCP, and Azure as a separate product.
SourceMultiple targets per plan
Published plans from $39 per month billed annually. Per-target rates on the pricing page.
One target on Astra Scanner and Pentest Expert; a rotating pool of five on Scanner Agency.
SourceReporting and risk management
Risk lifecycle with acceptance
Accept, remediate, and track every finding with CVSS and EPSS scores and a QoD threshold to cut false positives.
SourceVulnerability dashboard. No published risk acceptance workflow.
SourceHealth score over time
A health score per target and per account, trended over time.
No per-target grade over time published.
Publicly verifiable certificate
Automated scanning only. No human pentest, no certificate.
Pentest certificate after remediation.
SourceWhite-label reports
White-label PDF reports with your branding on Professional.
No white-label option published.
Import results from other scanners
Connect GitHub Dependabot and Snyk, and upload Nmap, OpenVAS, or ZAP results through the API.
SourceNo third-party result import published.
Integrations and API
REST API and webhooks
REST API and webhooks on Premium and above, no add-on fee.
SourceOne integration on Scanner Lite, unlimited on Astra Scanner and above. No public API published.
SourceSAML SSO
SAML SSO, access controls, and workspaces on Professional.
SourceNot listed on the Scanner plans; Enterprise is quoted with custom terms.
SourceLicensing, pricing, and support
Trial without a card
14-day Premium trial, no credit card.
Scanner Lite trial is $7 for one week.
SourceUnlimited scans per target
Unlimited scans per target on any schedule on Basic, Premium, and Professional.
Scanner Lite is 3 scans per month; unlimited from Astra Scanner.
SourceMSP and reseller program
MSP program with workspaces, white-label reports, and reseller pricing.
Scanner Agency covers a rotating pool of five targets with a 30-day cooling period between swaps.
SourceHow the two products run
External scanning
Hosted scanners. Add a URL, IP, or CIDR and scan.
Hosted web scanner on the licensed target.
Internal scanning
Internal scanner on Premium; Nessus scanners and Nessus Agents on Professional.
Not offered on scanner plans.
Scanner upkeep
HostedScan maintains the scanners and syncs the Greenbone feed daily.
Astra maintains its scanner and pentest playbooks.
Where data lives
HostedScan cloud with export and API.
Astra cloud dashboard.
What your team does weekly
Triage one list across every target.
Work through vetted findings for the licensed target; schedule the next pentest.
Pricing example
5 web applications with authenticated scans, plus the hosts behind them
One scenario priced on both products. HostedScan totals come from the published plan and per-target rates. Astra figures were checked in September 2026 and link to the source.
HostedScan Premium
$1,308 / year
$109 per month billed annually. 5 targets included.
Premium includes authenticated ZAP scans, API scanning, OpenVAS and Nuclei for the hosts, Nmap, SSLyze, the internal scanner, and the API. Unlimited scans.
Astra
$4,999 / year
Scanner Agency, the plan that covers a rotating pool of five targets with a 30-day cooling period between swaps, with unlimited scans and authenticated scanning. Astra Scanner is $1,999 per year for a single target.
From our customers
What our customers say
“We are a small charity and every dollar counts. I contacted their customer service team and asked if they had an option that would meet our needs. They understood our requirements and provided a solution that was an excellent fit. They have a fantastic product, but what makes them stand head and shoulders above the rest is their customer service.”
“HostedScan is our trusted partner for OWASP Top 10 testing and proactive security. Their platform is powerful, but it’s their dedicated support team that truly sets them apart.”
Victor Beitner • Founder
“We're so glad we found HostedScan. The platform doesn't just identify security issues—it gives us the visibility and confidence we need to stay on top of them. It's become a critical part of how we maintain our SOC 2 compliance, streamlining what used to be a time-consuming process.”
Paul Reinheimer • Co-Founder
Quick Answers
Frequently asked questions
Our knowledge base contains answers to technical questions, and you can always contact us for more details on our plans, pricing, or any questions.
Speed and power,
without the complexity
The world's leading vulnerability scanners, all in one platform.