View Plans & Pricing →
Security Maturity Automation Platform

ADCS The Default Security Foundation for SMBs

Enterprise-grade security for SMBs — even without a dedicated IT team.
54 scanners automatically discover vulnerabilities and convert them into "3 Actions This Week".

54
Scanners
Industry-Leading
11
Regulations Covered
GDPR / ISO / NIS2
¥29,800
Starting Monthly
1/10 of Manual Audit
24h
Report Delivery
Fully Automated

Plans & Pricing

Zero risk to get started. Begin with a one-time assessment, then upgrade to ongoing monitoring as needed.
Subscription plans deliver automatic monthly reports at the start of each month — track changes, review improvement history, and plan remediation and compliance responses systematically.

One-Time
Spot Assessment
$399
One-time

For those who want to understand their current security posture. A complete one-time diagnostic report.

  • Full 54-scanner assessment
  • Vulnerability report PDF
  • Prioritized remediation recommendations
  • Remediation procedure templates
  • No ongoing monitoring
Starter
Monthly Scan
$299
Monthly / Min. 6-month contract
Annual 20% OFF $239/mo ($2,868/yr)

Automatic report delivery at the start of each month. Track month-over-month changes and improvement history to plan remediation as needed.

  • Monthly report auto-delivered (1st of each month)
  • Monthly automated scan (all 54 types)
  • Month-over-month change & history tracking
  • Remediation procedure templates
  • Security badge
  • No action management / auto rescan
  • No CTEM / continuous threat management
Premium
Full Compliance Support
$799
Monthly / Min. 6-month contract
Annual 20% OFF $639/mo ($7,668/yr)

All Standard features + unlimited compliance certification support. ISO, GDPR, IPA — all handled in one place.

  • All Standard features
  • Compliance support unlimited
  • IPA SECURITY ACTION application guide
  • ISO / GDPR / PCI DSS full coverage
  • Automated audit trail PDF generation
  • B2B API access included
  • Dedicated support contact

Compliance Certification Support — Add-on Pricing

Available as individual add-ons on Starter & Standard plans. All included in Premium.

Regulation / Certification Scope Unit Price
IPA SECURITY ACTION ★Application guide & document templates$199
IPA SECURITY ACTION ★★Application guide & self-declaration support$349
APPI (Japan) ComplianceGap analysis & improvement procedures$199
GDPR ComplianceGap analysis, DPA / privacy response$349
NIST CSF / SOC 2Self-assessment report & improvement roadmap$349 each
ISO 27001 Gap AnalysisCurrent assessment, improvement plan, evidence organization$549
PCI DSS / CMMC / NIS2Requirements mapping & compliance guidance$549 each

※ Market rate: equivalent work from consultancies typically costs $2,000–$15,000

Payment Methods

💳 Credit Card (Visa / Mastercard / Amex)
🏦 Bank Transfer
🔒 Stripe (PCI DSS Compliant)

Clicking a plan button will redirect to Stripe checkout. For bank transfer, please contact info@avisail.com.

Enterprise & Custom Requirements

For organizations of 100+, custom integrations, or dedicated SLA guarantees, contact us.

Contact Us ↗

FAQ

What is the difference between Spot Diagnosis and monthly plans?

Spot Diagnosis is a one-time scan with no registration required. For continuous monitoring, incident management, and compliance support, choose a monthly plan.

Can I purchase add-ons on any plan?

Add-ons are available for Starter and Standard plan members via the settings page. Each add-on is a one-time purchase. Premium plan includes everything.

Can I change plans anytime?

Yes, you can upgrade or downgrade anytime from the settings page in your dashboard.

Is there an annual discount?

Yes, annual billing saves 20% on all subscription plans. Select "Annual" on the checkout page.

The Only Service That Guides You to the Fix

Most security assessments stop at "we found vulnerabilities."
ADCS is different. It converts discovered vulnerabilities into "3 Actions This Week" and automates the entire process — remediation steps, task assignment, and fix verification.

Designed for SMBs without a dedicated security team. Executives can understand their security posture at a glance — no technical jargon required.

The fundamental difference from competitors:
Competitors: "Discover vulnerabilities → Hand over report → Done"
ADCS: "Discover → Generate fix steps → Assign tasks → Verify fixes → Issue certificate" — end-to-end.

ADCS Security Dashboard

Sample Report

ADCS Security Assessment Report

Actual report cover page — delivered within 24 hours of assessment

3-Layer Security Maturity Roadmap

ADCS is not a one-off tool. It's a platform that systematically matures your organization's security posture over time.

Available Now
Layer 1

ADCS
Visibility + Remediation

Assess your organization from the attacker's perspective. Discover vulnerabilities and deliver prioritized remediation steps.

  • 54-scanner comprehensive assessment
  • CVSS score × business impact prioritization
  • Converted into "3 Actions This Week"
  • Auto rescan & verification report after fixes
Available on Standard+
Layer 2

CTEM
Continuous Threat Management

Continuous Threat Exposure Management. Continuously analyze attack paths and act before risks escalate.

  • Attack path simulation (monthly updates)
  • Risk score trend graph
  • Immediate impact assessment on new CVEs
  • Industry benchmark comparison
Layer 3

Compliance
Audit & Certification

Automatically map scan results to regulatory requirements. AI-guided path to IPA, ISO, and GDPR certification.

  • Auto-mapping across 11 regulatory frameworks
  • IPA SECURITY ACTION application guide
  • Auto-generated PDF for audit submission
  • Evidence ready for clients and financiers

ADCS Report Assessment Specs (54 Scanners)

Industry-leading automated assessment engine aligned with international standards: OWASP Top 10, CVSS, and MITRE ATT&CK.

🔍 External Assets & Infrastructure 8

  • Port scan (detect all externally exposed services)
  • Subdomain deep enumeration (DNS brute force)
  • Subdomain takeover detection
  • DNS configuration (SPF / DKIM / DMARC)
  • DNS zone transfer test
  • WHOIS, ASN & geolocation lookup
  • MX provider evaluation
  • Tech stack & version fingerprinting

🔒 SSL/TLS & Certificates 4

  • SSL/TLS configuration grading
  • TLS downgrade attack resistance test
  • Certificate management & expiry monitoring
  • HSTS & HSTS preload verification

🌐 Web App Vulnerabilities 15

  • SQL Injection (SQLi)
  • XSS (Cross-Site Scripting)
  • SSRF (Server-Side Request Forgery)
  • Path traversal & directory enumeration
  • Open redirect
  • Clickjacking
  • Mixed content detection
  • CORS misconfiguration
  • Dangerous HTTP methods
  • CSP (Content Security Policy) analysis
  • SRI (Subresource Integrity) verification
  • Cookie security attribute assessment
  • Form security evaluation
  • Login & authentication security
  • WebSocket security assessment

🔑 Data Leakage & Secret Detection 8

  • JS file secret detection (API keys, tokens)
  • Source map exposure detection
  • Error message information disclosure
  • HTML comment information leakage
  • robots.txt hidden path discovery
  • Exposed file & directory detection
  • security.txt configuration check
  • HTTP meta & server info disclosure

☁️ Cloud, API & Supply Chain 7

  • Cloud storage misconfiguration (S3/GCS public)
  • API endpoint auto-discovery
  • API security assessment
  • Third-party risk evaluation
  • Supply chain risk detection
  • CMS vulnerabilities (WordPress, Drupal, etc.)
  • WordPress deep scan

🛡️ Advanced & Comprehensive 12

  • Nuclei scan (1,000+ templates)
  • Phishing risk assessment
  • Phishing simulation
  • SMTP security evaluation
  • Incident response readiness scoring
  • Compliance mapping auto-assessment
  • Isolation header configuration check
  • HTTP header comprehensive evaluation
  • SMTP security diagnostics
  • Certificate Transparency (CT) log monitoring
  • Form submission security
  • Web app comprehensive security score

External OSINT Intelligence (9 Sources)

Shodan
Comprehensive exposed service & device search
Censys
Internet-wide asset discovery
VirusTotal
Malware & URL reputation
AbuseIPDB
IP reputation verification
LeakCheck
Leaked credential search
SecurityTrails
DNS history & change tracking
FOFA
Global asset search engine
crt.sh
Certificate Transparency logs

What is CTEM?

Available on Standard plan and above. Continuous threat exposure management — beyond the point-in-time scan.

Traditional security assessments are "snapshots at a single point in time." But attackers try new techniques every day, and new vulnerabilities (CVEs) are published every week.

CTEM continuously measures "how exposed are you to attackers right now" and alerts you before risks worsen. It's the next-generation security framework selected by Gartner as a Top 10 Strategic Technology.

ADCS CTEM:
Accumulates scan data and automatically updates monthly risk score trends, industry average comparisons, and attack path simulations. Instantly surface insights like "security score declining despite fixes" or "this area is becoming rapidly more dangerous."

Attack Path Simulation

Monthly automated simulation of which routes attackers would actually use to infiltrate

Risk Score Trends

Visualize monthly security score changes. Quantify the impact of your improvements

Instant CVE Assessment

When a new vulnerability is published, automatically assess its impact on your organization immediately

Industry Benchmarking

Compare against peer companies and industry averages to objectively understand your security standing

CTEM is available on Standard plan (¥59,800/month)

Get Started Now

How ADCS Compares

Verify ADCS advantages with objective data

※ Based on official websites & public materials of major competitors. Surveyed March 2026. Competitors shown anonymously.

Criteria ADCS (Avisail) Auto Scanner A
Web App Focused
Auto Scanner B
ASM Focused
Auto Scanner C
Integrated Platform
Target Audience SMBs without IT staff Dev teams & startups SMB to mid-market SaaS & enterprise
Starting Monthly Fee ¥29,800~ (transparent) ~¥20,000~ ¥40,000~ ¥50,000~
Scan Coverage Web app + Network
+ Cloud + OSINT (all-round)
Web app only Network / ASM focused ASM + Web app + Cloud
Scan Method Fully automated (54 scanners) Automated scan Automated scan Automated scan
Auto Remediation Steps ✓ Auto-generated + re-verified ✗ None ✗ None ✗ None
Auto Rescan After Fix ✓ Included
Vendor-Shareable Link ✓ Included
Regulatory Compliance (GDPR/IPA/ISO) ✓ 11 frameworks auto-mapped ✗ OWASP only
IPA SECURITY ACTION Support ✓ Application guide included
CTEM (Continuous Threat Management) ✓ Available on Standard+ ✗ Partial
Executive Dashboard ✓ Security score display

※ Comparison covers major automated security diagnostic SaaS services. Based on official sites & public materials (March 2026). Auto remediation steps, regulatory compliance support, and IPA application guidance were not offered by any surveyed competitor.

Only ADCS "Guides You to the Fix"

Competitors stop at "finding." ADCS completes the loop — remediation, re-verification, and certificate issuance.

View Pricing
Free Download

Download Your Free
Self-Check Report

Answer 10 security questions and get your score instantly. Print the results as a professional report. No downloads required — everything runs in your browser.

Start Free Self-Check

Instant results • Print-ready report • No signup required

Built for Your Peace of Mind

🔒 Data Security

Only the target domain is scanned. All collected data is encrypted with AES-256. Hosted on servers in Japan (Railway & Supabase). No data is ever shared with third parties.

📋 APPI & GDPR Compliant

ADCS is designed to comply with Japan's Act on Protection of Personal Information (APPI) and GDPR. Data export, deletion, and consent management are built in. We practice what we preach.

⚡ Stripe Payments (PCI DSS Level 1)

Payments are processed via Stripe (PCI DSS Level 1 certified). Card numbers are never stored on Avisail's servers. Bank transfer also accepted.

🎯 Ideal for IPA SECURITY ACTION

We support obtaining Japan's Ministry of Economy-endorsed "IPA SECURITY ACTION" ★ and ★★ certifications. Use ADCS diagnostic reports and application guides to earn trust from partners and clients.

📊 Audit & Client Submission Ready

Auto-generate documents for financial institution security questionnaires, ISO/PCI DSS/GDPR audit evidence, and M&A due diligence — everything your business relationships require.

🌐 11 International Frameworks

Covers IPA, APPI, GDPR, ISO 27001, PCI DSS, SOC 2, NIST CSF, NIS2, Cyber Essentials, CMMC, and CSA STAR. Ready for global business relationships.

Supported Regulations & Frameworks

IPA SECURITY ACTION
★ / ★★ Application Support
APPI
Japan
GDPR
EU
ISO 27001
International
PCI DSS
Card Industry
NIST CSF
US
SOC 2
US
Cyber Essentials
UK
NIS2
EU Directive
CMMC
US Defense
CSA STAR
Cloud
Get Started Now

Start by Checking Your Current Posture — Free

Self-check report to understand where you stand → Spot assessment ¥50,000 for full picture → Starter for ongoing monitoring.
Your first step is completely risk-free.

Free Self-Check Report View Plans & Pricing

Contact: info@avisail.com  |  Response: within 1 business day  |  Languages: Multilingual