Intruder review
A broad hybrid scanner with a useful free tier and target-based paid pricing.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Intruder is a vulnerability management platform for security, IT, and compliance teams that need coverage across internet-facing infrastructure, internal devices, applications, APIs, cloud environments, and container images. Its hybrid model combines hosted scanning through the Intruder portal with agent-based scanning for internal Windows, macOS, and Linux devices. Scheduled, on-demand, and emerging-threat scans, remediation verification, and PDF or CSV reporting support ongoing vulnerability workflows.
The Free plan costs $0 USD forever and includes weekly external vulnerability scans, weekly cloud security checks for 1 connected account, weekly container image scans for 2 images, and 3 users. It does not include authenticated web application scanning. Cloud adds custom scan schedules, daily checks for 3 cloud accounts, daily container image scans, web app and API testing, and 15+ integrations. Pro includes Cloud features plus support for 10 cloud accounts, agent-based internal scanning, monitoring on the top 50 ports, and 10 AI investigation credits. Enterprise adds shadow IT and unknown asset discovery, monitoring on all ports, 1,000+ attack surface checks, unlimited cloud accounts, and advanced access control. Cloud and Pro use a base fee plus a per-target fee, while Enterprise is quoted separately.
Integration coverage fits teams already working across AWS, Google Cloud, Microsoft Azure, Cloudflare, GitHub, GitLab, Jira, Linear, ServiceNow, Azure DevOps, Slack, Microsoft Teams, Drata, Vanta, and Microsoft Sentinel. Intruder suits organizations seeking one platform for broad hybrid scanning and continuous vulnerability management. Teams needing only a narrow external scanner may find this scope unnecessary, while organizations requiring PCI ASV status should choose an alternative.
Intruder pros and cons
- Where it wins
- Covers external, internal, web, API, cloud, and container targets
- Free plan includes weekly external, cloud, and container scans
- Integrates with AWS, GitHub, Jira, Slack, ServiceNow, and SIEM tools
- Where it doesn't
- Authenticated web application scanning is excluded from the Free plan
- Cloud and Pro pricing combines a base fee with a per-target fee
- Intruder is not a PCI ASV
Intruder fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update