What is the difference between CORE and PRO?

CORE is our Apache 2.0 open-source engine. PRO adds the Auto-Assign Rules Engine, Executive Reporting, and Exception Pipelines.

🐴 RiskRancher

Pricing Home

Honest pricing. Flat fees.

Start free with Core. Pay once a year for Auditor or Pro — unlimited assets, no per-scan tax.

Core

Apache 2.0 open source

Single binary + SQLite
No-code Adapter Builder
Ticket dashboard & SLAs
Report → findings clip (DOCX/PDF)

Download Core

Auditor

$1,999/yr

Pentesters & boutiques

Everything in Core
Findings → branded PDF report
Polished report ↔ findings workflow
Offline RSA license

Learn more →

Pro

$4,999/yr

Security managers & teams

Everything in Auditor
Auto-assign rules engine
Exception / magic-link pipelines
Suppressions, KEV, audit trail

Learn more →

Common Questions

Is RiskRancher really 100% air-gapped?

Yes. RiskRancher is a single binary with zero external API calls. It stores everything in a local SQLite database on your own hardware.

What is the difference between CORE, Auditor, and PRO?

CORE is the free Apache 2.0 engine (ingest, tickets, no-code Adapter Builder). Auditor ($1,999/yr) adds findings↔branded report workflows for pentesters. PRO ($4,999/yr) adds auto-assign, exception pipelines, suppressions, and team automation.

How does the offline licensing work?

We use RSA-signed license keys. Your machine validates the signature locally using our public key—no internet ping required.

Can I import data from Qualys or Tenable?

Yes. Use the no-code Adapter Builder: upload a sample Qualys, Nessus, Trivy, or any JSON/CSV export, map title/asset/severity in the UI, and ingest. No custom parser code required.