Community
Manual pentest and self-serve scoring. Rate-limited reseed on shared infrastructure.
- ✓ 3 live rings (43 planted vulns)
- ✓ Open scorer (CLI)
- ✓ PENTEST guides
- ✗ Dedicated operator key
- ✗ Official vendor report
Start free on public labs. Upgrade when you need dedicated keys, CI-scale reseed, and a report you can attach to an RFI.
Manual pentest and self-serve scoring. Rate-limited reseed on shared infrastructure.
For vendors and AppSec teams running blind benchmarks in CI.
VGYM_OPERATOR_KEYSVPC, dedicated lab hostname, custom rings, signed AUP + workshop.
| Capability | Community | Pro | Enterprise |
|---|---|---|---|
| Blind evaluation rules | ✓ | ✓ | ✓ |
| Decoy false-positive measurement | ✓ | ✓ | ✓ |
| Rotating victim identities | ✓ | ✓ | ✓ |
| Dedicated operator API key | — | ✓ | ✓ |
| Truth pack + SHA256 release | Public repo | Licensed ZIP | Custom |
| Support SLA | Community | 48h email | Contract |
Founding partners — $99/mo × 12 months (5 slots). Prices exclude tax. Labs contain real RCE — use only against VulnGym hosts per AUP.