For individuals exploring CVE monitoring
Start tracking vulnerabilities, alerts, and API access with the core OpenCVE experience
Includes: 1 project, 1 user, 1 automation, 5 subscriptions, 100 API calls / hour
Get started/ month
For teams starting with CVE monitoring
Monitor your stack, automate alerts, and get AI-powered summaries in one platform
Includes: 3 projects, 3 users, 3 automations, 15 subscriptions, 1,000 API calls / hour
Get started/ month
Best for security teams scaling CVE monitoring
Prioritize vulnerabilities across teams, dashboards, exports, automations, and integrations
Includes: 10 projects, 10 users, 10 automations, 50 subscriptions, 5,000 API calls / hour
Get started/ month
For organizations needing unlimited CVE monitoring
Scale OpenCVE with SSO, audit logs, unlimited usage, and enterprise-grade governance
Includes: unlimited projects, users, automations, subscriptions and API calls
Get started| Free | Starter | Pro Recommended | Enterprise | |
|---|---|---|---|---|
/ month | / month | / month | ||
| For solo SecOps Start small, get notified fast | For small teams Track a few projects effortlessly | For growing teams Scale notifications & retention | For large organizations Unlimited projects & users | |
| Select Plan | Select Plan | Select Plan | ||
| Projects A project groups the technologies you track and defines how you’re notified, giving you a clear and focused view of your CVE exposure. Learn more in the documentation → | 1 | 3 | 10 | Unlimited |
| Users Users are members of your organization who can access projects, view CVEs, and be assigned to security actions such as analysis or risk acceptance. Learn more in the documentation → | 1 | 3 | 10 | Unlimited |
| Automations Automations define rules and actions when CVEs match your criteria, routing alerts to Slack, email, webhooks, and more. Learn more in the documentation → | 1 | 3 | 10 | Unlimited |
| Subscriptions Subscriptions define the technologies you track (e.g. Fortinet, Cisco, WordPress, Terraform). This quota is shared across all projects in your organization. Learn more in the documentation → | 5 | 15 | 50 | Unlimited |
| Reports Retention A daily report is generated for each project, showing all CVE activity impacting your tracked technologies and giving you a clear security history over time. Learn more in the documentation → | Not included | 1 month | 12 months | 24 months |
| API Calls The OpenCVE API allows you to query CVEs and their full details, as well as project-level vulnerability exposure, for seamless integration with enterprise security tools. Learn more in the documentation → | 100 /hour | 1000 /hours | 5000 /hours | Unlimited |
| Notification Delivery Notification delivery represents the actual sending of CVE alerts through the channels configured in each project. Learn more in the documentation → | Unlimited | Unlimited | Unlimited | Unlimited |
| Email Notification Emails are sent to the configured address whenever new CVEs are published or existing CVEs are updated. Learn more in the documentation → | ||||
| Slack Notification CVE updates are posted directly to your Slack channels, keeping your team informed in real time. Learn more in the documentation → | ||||
| Webhook Notification Webhook notifications send CVE updates as HTTP POST requests to a configured endpoint, enabling seamless integration with internal tools. Learn more in the documentation → | ||||
| AI Report Summary An AI-generated summary highlights the most critical CVEs and recommended actions, helping you quickly focus on what matters most. Learn more in the documentation → | ||||
| Multiple Dashboards Build separate dashboards to track CVEs across different environments, teams, or customers. Learn more in the documentation → | ||||
| CSV export Export CVE results as CSV files for use in spreadsheets, reports, and external tools. | ||||
| API token scopes Create organization API tokens with granular scopes on Cloud Pro and above. Learn more in the documentation → | ||||
| MFA Enforcement Enforce multi-factor authentication (MFA) across your organization to ensure all members secure their accounts with an additional layer of protection. Learn more in the documentation → | ||||
| SAML 2.0 SSO Enable secure authentication via your corporate Identity Provider (Okta, Azure AD, Google Workspace, etc.), allowing users to sign in with their existing company credentials. Learn more in the documentation → | ||||
| Audit logs See who changed what and when with a detailed history of actions across your organization. Learn more in the documentation → |
Need more? Increase your Pro limits directly in the app. Additional charges apply.
| Additional capacity | Monthly billing | Annual billing |
|---|---|---|
| Subscription | $1/month | $10/year |
| Project | $5/month | $50/year |
| User | $5/month | $50/year |
| Automation | $5/month | $50/year |
Prices are per additional unit.
Self-hosted CVE monitoring
Self-host OpenCVE on your infrastructure with full control over your data, subscriptions, and notification workflows.
Best for: Individuals, small teams, and organizations that want a self-hosted CVE monitoring foundation.
Advanced vulnerability intelligence
Use our managed platform with AI-powered analysis and enterprise security controls without infrastructure overhead.
Best for: Security teams, SOCs, MSSPs, and organizations that need to prioritize and automate vulnerability workflows.