Can I run Clone Systems alongside my current scanner?

Yes. Many customers run both for one cycle to compare results, then let the old subscription lapse at renewal.

Do I have to re-enter my assets?

You enter your targets once per service in the portal. There is no import from another vendor, and most customers are scanning the same day.

How fast are exceptions reviewed?

Exceptions submitted in the portal are reviewed and approved or rejected within 24 hours, and they stay tied to the scan so you do not resubmit them.

Will my auditor accept the reports?

Reports are mapped to the controls auditors ask about, including PCI DSS 4.0.1, HIPAA, SOC 2, NIST, ISO 27001 and CIS, and Clone Systems has been a PCI ASV since 2007. Clone Systems is an ASV, not a QSA, so your assessor decides what satisfies your audit.

How soon can I scan after buying?

Your account is ready right after checkout. The only setup is on your side: whitelisting the scanner, entering targets, and deploying the appliance for internal scanning.

Is this self-managed or managed for me?

Scanning is self-managed from the portal, with 24/7 technical support when you need a hand. For monitored security, see Managed SOC + SIEM.

What happens to my data if I add the AI Assistant?

The Clone Systems AI Assistant runs in Clone Systems' own data center. Your findings are never sent to a third-party AI provider.

Is there a minimum contract?

Packages are sold per year, bought online, with no sales call.

Switch Your Vulnerability Scanner to Clone Systems

Switch your vulnerability scanner to one you can actually see inside

Most companies do not go looking for a new vulnerability scanner. They start looking after an exception sits in a queue for three weeks, a support ticket goes unanswered, or a scan misses something an auditor finds. Clone Systems runs external, internal, agent-based and authenticated web app scanning in one portal, mapped to nearly every framework, with the same scanning engine the PCI Security Standards Council tests every year. Everything is priced on the site, bought online, and ready to use the moment you check out.

Five reasons people leave their scanner, and what changes here

Exceptions that sit for weeks.

Submit an exception in the portal and it is reviewed and approved or rejected within 24 hours. Exceptions stay tied to the scan, so you never resubmit them.

Support that is a ticket queue.

24/7 technical support from the same team that runs the scanner, with manuals under Settings in the portal and a support team on hand to troubleshoot.

Scans that miss things.

The scanning engine is tested every year under the PCI Council's ASV program, and Clone Systems has been a listed ASV since 2007. Credentialed scans see patch levels from inside the host, not just what an attacker sees from outside.

No idea what the scanner is doing.

The portal shows what ran, what it checked, what it found, how risk is trending, and every report is one click away. Nothing is a black box.

Pricing that is a quote and a call.

Every price is published. Buy online, no sales call, free rescans on every package.

What you get when you switch

External scanning from cloud scanners, nothing to install.
Internal scanning with a physical or virtual appliance (VMware, Hyper-V, VirtualBox, Citrix XEN).
Agent-based scanning for endpoints that are not on the network.
Authenticated web app scanning behind the login.
Credentialed and uncredentialed scans.
Risk-based prioritization.
Audit-ready reports mapped to PCI DSS 4.0.1, HIPAA, SOC 2, NIST 800-53 and CSF, ISO 27001, CIS Controls, GLBA, FISMA, CMMC and GDPR.
Rescan on demand after fixes.
Optional Clone Systems AI Assistant that runs privately in Clone Systems' own data center, so findings never leave the portal.

How switching works

Buy the package that matches your IP, agent or application count. Your portal account is ready as soon as you check out.

Whitelist the Clone Systems scanner on your firewall. The scanner range is shown in the portal.

Enter your targets. For internal scanning, deploy the appliance inside your network.

Run your first scan. Export the report you need for your next audit.

Run both scanners for one cycle if you want to compare, then let the old one lapse at renewal.

Pricing

External Vulnerability Scanning Service

$595 per year for 10 IPs
$2,495 for 50 IPs
$5,985 for 150 IPs

Internal Vulnerability Scanning Service

$1,095 per year for 128 IPs
$1,495 for 512 IPs
$2,295 for 2,048 IPs

Agent-Based Vulnerability Scanning Service

$1,195 per year for 25 agents
$3,995 for 100 agents
$7,995 for 250 agents

Authenticated Web App Scanning Service

$5,995 per year for 10 applications
$14,995 for 50 applications
$24,995 for 150 applications

Free rescans on every package. Switching from another scanner? Use code SWITCH20 at checkout for 20% off any vulnerability scanning package, new orders only.