Pathbreak is priced by the AWS accounts you monitor. Everything the product does is included at every size: validated attack paths, fixes ranked by blast radius with the command for each, exposures and compliance scoring, integrations, single sign-on, unlimited users and unlimited history.
| Monitored AWS accounts | Price per year |
|---|---|
| Up to 5 accounts | $12,000 platform minimum, five accounts included |
| Accounts 6 to 25 | $900 per additional account |
| Accounts 26 to 100 | $400 per additional account |
| 101 accounts or more | Tailored quote based on account scope, scan frequency, graph complexity, support and procurement requirements |
$30,000 per year
$1,200 per account per year
Annual, invoiced upfront. Additions during the year are prorated at the marginal rate.
Included in every subscription at every account size
Five accounts is $12,000 a year. Ten is $16,500, twenty-five is $30,000, fifty is $40,000 and a hundred is $60,000. Pricing as of September 2026.
Every customer gets the whole product. What changes with size is the number of accounts. The limits below cover how many scans you run each month and how large an account can be. Everything else is unlimited.
Validated privilege escalation paths with evidence on every hop, fixes ranked by how many paths each one breaks, the exact command for each, a validate step that confirms the path is gone, and cross-account path checks across your connected accounts.
Exposure checks by resource, scoring against 44 compliance frameworks with evidence export, asset inventory, and Jira, AWS Security Hub and S3 integrations. Ask the map in plain English or write Cypher against the graph.
Unlimited users, single sign-on, custom roles, API access, a support access log, and your choice of model provider running on your own keys. Unlimited history and exports while your subscription is active.
Scan one account, look at the results, then decide how far to go.
Free
One AWS account, up to 3 read-only scans and 10 days to see the validated paths and confirm a fix held.
$2,500 to $5,000
$2,500 for up to five accounts, $5,000 for up to twenty-five. Thirty days, agreed coverage, reviewed output, one remediation review and a closeout decision. Credited in full against your first annual invoice if you sign within 30 days of closeout.
From $12,000 a year
Scheduled scanning of every monitored account, every fix tracked to confirmation, and the founders one message away.
Two weeks, fixed price, delivered by the founders using Pathbreak. We run the scans. You get the validated paths, the ranked fixes, up to ten prioritized findings reviewed with you, one change-planning session, one retest after your changes, a written report and a 60-minute readout. Every change to your environment stays yours to approve and apply.
$9,500
Validated paths, ranked fixes with commands, selected control results and evidence mapped to the frameworks relevant to your review, report and readout.
$18,000
The same, with cross-account paths and an organization-level trust map. Larger scopes quoted.
Annually, invoiced upfront against a signed order form, by bank transfer. Accounts added during the year are prorated at the marginal rate and end with your term; reductions apply at renewal. If your organization needs to buy through AWS Marketplace, tell us when we talk.
A unique AWS account ID that you contract for monitoring, production or non-production. Accounts that Pathbreak can see through AWS Organizations or trust relationships are not billed until you add them.
No. 100 accounts is a pricing boundary. Pathbreak supports larger environments; above 100 accounts we quote the deal based on account scope, scan frequency, graph complexity, support and procurement requirements.
A path is validated when the authorization chain resolves end to end against the evidence Pathbreak collected from your account, read-only. Exploit execution is not part of the subscription and happens only under a separately authorized engagement.
You can export findings and history until the end of your term. Deletion timing and backup retention after termination are set out in the order form and DPA.
Pathbreak counts an account's resources before each scan. If an account is over our size threshold we don't run the scan automatically. We get in touch and scope it with you. Accounts that size are unusual, and we price them case by case rather than charge an overage.
No. Invite your whole security and platform team. Users, history while your subscription is active, and report exports are unlimited at every size.
No. Every Pathbreak subscription includes API access, single sign-on and the Jira, AWS Security Hub and S3 integrations, including the $12,000 platform minimum. Single sign-on uses OpenID Connect today, and SAML is available on request.
No. You connect your own provider (Anthropic, OpenAI, Google Gemini, Amazon Bedrock in your account, or any OpenAI-compatible endpoint) and pay the provider directly for token usage. Pathbreak's infrastructure, storage, graph processing and support are part of the subscription.
Yes. Additions are prorated at the marginal rate and end with your existing term. Reductions apply at renewal.
Annually, invoiced upfront against a signed order form, by bank transfer. If your organization needs to buy through AWS Marketplace, tell us when we talk.
Yes. Pathbreak has a free trial: one AWS account, up to 3 read-only scans and 10 days, so you can see validated paths from your own environment before you commit. API access and integrations come with a subscription.
This is our pricing as of September 2026. A signed order form keeps its price for the whole term.
Request a demo and one of the founders will reply personally within one business day.
Request a demo Start a free trial
English
Español
Français
Deutsch
日本語
한국어
العربية