Fluid Attacks is the AppSec company that provides Continuous Hacking, an all-in-one solution to accurately find and help you remediate vulnerabilities throughout the SDLC and ensure secure deployments.
Fluid Attacks' Continuous Hacking is offered through two plans:
Essential plan: Secures your application with completely automated security testing and vulnerability remediation support.
Advanced plan: Leverages the Essential plan features, plus ethical hackers' manual security testing and help understanding vulnerabilities.
For a detailed comparison of benefits between Continuous Hacking plans, visit fluidattacks.com/plans/.
You can enjoy a 21-day free trial of the Essential plan. All you need is a Git repository and a corporate Google, Azure or Bitbucket account.
To learn how to start quickly with Continuous Hacking after signing up, read the articles in Get things ready for security testing.
The Essential plan bills your organization a fixed monthly amount per every group it has on the platform.
The Advanced plan billing for an organization is based on the number of groups and active monthly authors (developers) contributing to its code repositories.
To count authors, Fluid Attacks does the following:
Check the commits recording changes made to the code repositories and integrated to the branch under Continuous Hacking during a month.
Extract metadata of the commits made and store them in an append-only database.
Add the dates on which those commits were first found.
Filter commits for a specific month and remove duplicate authors, as an author might have used other accounts to make some commits in addition to those made using their primary email/account.
The resulting list is what Fluid Attacks uses to calculate the billing for the organization in a given month.
For a detailed explanation of the process, please refer to the Billing for the Advanced plan article. Additionally, you can find answers to common questions in the Billing FAQ.