What would stop you from trying Complyeah (https://complyeah.com/) this month? Be specific about how you handle this today. Also say the maximum you would pay per month in USD (0 if nothing).

Page reviewed

External Security Testing and Pentest Reports | complyeah

https://complyeah.com/ (opens in a new tab)
Saved screenshot of External Security Testing and Pentest Reports | complyeah
Screenshot saved with this question. The live page may have changed.Open full image ↗

10 fictional AI personas. Exploratory perspectives, not a survey of real customers. Methodology & limitations

Simulated interest

43/100

AI synthesis, not measured demand

Suggested price range

$50–300

Median $50 · simulated willingness to pay

Response sentiment

Positive 0%Neutral 100%Negative 0%
The takeaway

What this panel suggests

Overall reaction is neutral rather than dismissive. The main blocker is packaging clarity: several buyers read the $50 offer as either a monthly subscription or a one-off test and wanted to know the exact terms for a company their size. Others worried that the team volume-rate language and the 15+ verified-domain framing implied hidden gating or a plan mismatch, especially for organizations with multiple domains. A third concern is operational fit: one respondent said they wanted to know how it fits into their existing cadence. The page itself says a free posture check is $0 and the external pentest is $50 per scan with one retest, so the friction appears to be misunderstanding of pricing and scope rather than rejection of the security-testing value. The evidence, fixes, and auditor-ready reporting did not draw strong objections in this batch.

A hypothesis to test

Pricing & positioning

Clarify packaging in plain language: state whether the offer is per-scan or subscription, explain exactly what the $50 includes, and spell out whether the 15+ verified-domain language is a requirement or only a volume discount.

The main blocker is confusion about billing terms, not pushback on value.Make the free posture check vs. paid pentest distinction unmistakable.Explain how multi-domain customers are handled and whether credits or volume pricing apply.

Recurring themes

Pricing model clarity
“I'm not clear on the exact terms for a company our size.”Read Cory Muller’s response →
Volume and scaling limits
“I'm not sure how that scales up to our 18 domains.”Read Dan Block-Bartell’s response →
Workflow integration
“What concerns me about Complyeah is understanding how this fits into our existing cadence.”Read Cory Muller’s response →

Objections to investigate

  • Unclear pricing structure (subscription vs. per-scan)
  • Confusion regarding volume thresholds (15+ domains requirement)
  • Lack of integration visibility with existing tools

Use these findings to plan customer interviews or experiments. How to interpret AI research

What the panel said

Click a name to open that persona’s full profile.

Cory Mullerneutral

Our current process involves quarterly external checks using browser-based scanners and OWASP ZAP, followed by a review against a shared remediation checklist before releases. What concerns me about Complyeah is understanding how this fits into our existing cadence. The $50 per scan price is attractive for an external pentest with a retest, but I'd need to see how it integrates with our staging environment and if the "Team Volume Rate" applies to our 14-person company, as it mentions 15 or more verified domains. I'd be willing to pay up to $100 per month for a service that seamlessly integrates and provides actionable, auditable reports, but I'm not clear on the exact terms for a company our size.

Simulated interest: 40/100

Doreen Bartonneutral

Currently, my team and I manage security through a combination of Detectify and a meticulous manual retesting spreadsheet. While the $50 price point for an external pentest with one retest is intriguing, it's unclear how this scales across our four domains or if it integrates with our existing workflow. The "team volume rate" mentioned in the product blurb seems to apply to organizations with 15+ domains, which isn't our current scale. I'd need more clarity on handling multiple domains and the exact process before considering a trial.

Simulated interest: 30/100

Janosch Fitschenneutral

This offer seems quite affordable, especially the $50 external pentest. Today, we rely on a combination of free scanners and manual checks for external reviews. While the free posture check is interesting, my primary concern is the "team volume rate" mentioned in the product blurb – it implies a higher cost if we don't have 15 or more verified domains, which we don't. It's unclear if the $50 is a one-time test or a monthly subscription. Given our lean approach, I'm hesitant to commit to anything beyond ad-hoc testing unless it's exceptionally cost-effective. I wouldn't pay more than $50 per item for a single pentest and retest.

Simulated interest: 30/100

Dan Block-Bartellneutral

Right then, what would stop me? It's the sheer volume of domains we're juggling – 18 at the moment. My current process is a bit of a patchwork; spreadsheets, manual checks, and occasional freelancer write-ups. It works, but it's not exactly scalable and frankly, it's a bit of a headache to keep consistent across everything. While the $50 per pentest sounds incredibly affordable, especially for one domain, I'm not sure how that scales up to our 18 domains. It's not clear if that's a recurring monthly cost for each or a one-off. If it's per domain, per month, that adds up. I'd need to understand the volume pricing more clearly.

Simulated interest: 40/100

Noah Emardneutral

Honestly, trying Complyeah this month isn't a priority. My current process involves using our cloud provider's built-in scans and doing manual checks. It's time-consuming, but it fits our budget. The $50 price point for a pentest is reasonable, and the prospect of a retest is appealing, but I'd need to see how it truly integrates with our existing, albeit manual, workflow. It's hard to justify allocating time to a new tool right now when we're so focused on product development and the upcoming Series A. If I were to consider it, perhaps a small, one-time test for $50 would be the maximum I'd pay, assuming it's a single item test, not a monthly subscription, as we don't have a recurring budget for this.

Simulated interest: 30/100

Ameline Noelneutral

Our current process involves quarterly external security reviews for five verified domains, coordinating engineering, customer support, and a freelance pentester. We manage the workflow manually, which is becoming cumbersome as we prepare for ISO 27001 certification. The offer of a $50 external pentest with one retest is intriguing, especially the $99 human review option, as it could streamline our reporting. However, the product blurb mentions "team volume rate" for organizations with 15 or more domains, which makes me question if this $50 offer is truly for one of our domains or if there's a minimum volume required for our company size. If it covers one of our domains as described, I would consider it. My maximum acceptable price for this service, given our current workflow and preparing for ISO 27001, would be $50 per pentest, as advertised.

Simulated interest: 60/100

Anaadi Mahajanneutral

Right now, what would stop me is the need to integrate this into our existing workflow. We're already using Intruder for scans and Notion for reporting, which is functional, albeit manual. Complyeah's offer of a $50 external pentest with one retest sounds interesting, especially with the SOC 2 mapping. However, I'd need to understand how it complements or replaces our current setup, and if it can handle our multiple domains without becoming another silo. I'm willing to pay up to $50 per scan, as that's the advertised price for a single pentest.

Simulated interest: 60/100

Lilly Dekkerneutral

For now, I rely on our contractor for occasional reviews and free scans, which has been sufficient. However, the idea of a comprehensive external penetration test for $50 with one retest is appealing, especially given the sensitive data we handle. My hesitation is understanding if this $50 is a one-time fee or a monthly subscription. If it's a one-time cost for a single test, I might consider it as a supplemental check, but I'm not looking for ongoing monthly security tool costs right now. I would pay a maximum of $50 per scan.

Simulated interest: 30/100

Wilbur Reingerneutral

The biggest thing that would stop me is the manual retest phase we currently have after every release. It's a real bottleneck. Your offering of a "full retest after you fix them" sounds intriguing, but I'm not clear on how that integrates with our existing workflow. We're currently using spreadsheets and GitHub tickets to track everything, and I'd need to see how Complyeah fits into that without adding more manual work. The $50 per scan with one full retest within 60 days is certainly affordable for a startup like ours, but it's per scan. I'd need to understand the volume pricing, especially since we have eight domains. If it scales reasonably, I could see paying around $150 per month for comprehensive coverage across our key domains.

Simulated interest: 60/100

Bhavani Patilneutral

My current process involves a small internal ops team and external auditors for security testing. We meticulously collect all evidence and retest notes in a shared drive, which is quite manual. The $50 per pentest with one retest sounds intriguing, especially the $99 human review option for auditors. However, I'm concerned about how this integrates with our existing, albeit manual, workflow and the administrative burden it might add. I'd need to understand how this scales across our 15 domains and if it truly simplifies things rather than creating another system to manage. My maximum acceptable price would be $300 per year for an unlimited number of domains, as our current approach, while labor-intensive, doesn't have a direct per-domain cost.

Simulated interest: 50/100

Keep exploring.

Find your next question or see which topics divide AI panels.

Keep exploring

What would you ask next?

Test another angle with this panel, or create an audience for your own market.