Plans & pricing
Plain-English security checks for your websites and phone apps. Prices in Singapore dollars.
Free
- 1 website
- 1 team member
- 1 check on demand per week
- Run checks by hand
- History kept 1 month
6 checks included
- Website padlock
- Website safety settings
- Email protection
- Web address expiry
- Blacklist check
- Privacy basics
Starter
- 1 website
- 3 team members
- 4 checks on demand per month
- Automatic checks: weekly
- History kept 1 year
14 checks included
- Website padlock
- Website safety settings
- Email protection
- Web address expiry
- Blacklist check
- Privacy basics
- Outdated software
- Exposed files
- Code from other companies
- Forms with personal data
- Open doors (ports)
- Staff emails in data leaks
- Known-problem scan
- Web weakness scan
Business
- 3 websites or apps
- 10 team members
- 20 checks on demand per month
- Automatic checks: weekly or daily
- History kept 2 years
- 5 phone app checks per month (Android & iPhone, incl. TestFlight)
- Your company logo on reports
- Monthly all-sites summary report
- Cyber Essentials evidence pack
18 checks included
- Website padlock
- Website safety settings
- Email protection
- Web address expiry
- Blacklist check
- Privacy basics
- Outdated software
- Exposed files
- Code from other companies
- Forms with personal data
- Open doors (ports)
- Staff emails in data leaks
- Known-problem scan
- Web weakness scan
- Look-alike web addresses
- Email accounts
- Behind-the-login scan
- Mobile app check
Just launching an app or website?
Built it quickly, maybe with AI tools? The AI-app launch check looks for the mistakes new apps make most often, such as secret keys in the code and databases anyone can read, and tells you if you're ready to launch. S$99.00, one-off, no subscription.
Good to know
We only check what you own. You prove each website is yours before we look at it. We test safely and never try to take over or damage your website. (The deeper web checks may send test entries through your forms, the way a careful security tester would.)
Change or cancel any time. Upgrades start straight away and you only pay the difference. Downgrades and cancellations take effect at the end of the period you've paid for. Nothing is ever deleted when you move to a smaller plan.
Checks powered by trusted open-source tools. Alongside GateClash's own checks, we run well-known open-source security tools automatically and explain their results in plain English:
- Known-problem scan: Nuclei by ProjectDiscovery, which compares your website with thousands of tests for known weaknesses written by security experts worldwide.
- Website padlock (paid plans): testssl.sh, which tests your secure connection for known encryption flaws and weak settings.
- Look-alike web addresses: dnstwist, which finds thousands of fake names that could be mistaken for yours.
- Outdated software: Google's OSV database, which lists known problems in the ready-made code parts websites are built from.
Deeper checks powered by ZAP. Our Web weakness scan and Behind-the-login scan run ZAP automatically. ZAP is the open-source scanner that describes itself as the world's most widely used web app scanner, and security professionals use it to find weaknesses such as SQL injection and cross-site scripting. GateClash sets it up, runs it safely on websites you've verified, and turns its results into plain-English fixes. (GateClash is not affiliated with or endorsed by any of these projects.)
Not a certificate. GateClash helps you get ready for CSA Cyber Essentials and PDPA; the certificate itself comes from a CSA-appointed certification body.