Home
/
Blog
/
Comparisons

Feroot pricing

There are no public figures. Here is what drives the quote, what to ask for, and an honest comparison against something that does publish.
TL;DR
Feroot pricing
NO PUBLISHED FIGURES
Feroot shows tier names but no numbers. Assess, Govern and Enterprise are listed for each product, with pricing on request.
WHAT DRIVES THE QUOTE
Which product you take, which tier, your scale, your regulatory scope, and your support level.
THE COMPARISON PROBLEM
You cannot compare quote-based products without running sales cycles, which is a real cost in time.
Short on time? We publish ours, which is the only figure on this page we can state with certainty. See it.

How much does Feroot cost?

Feroot does not publish figures. Their pricing page lists three tiers, Assess, Govern and Enterprise, across products including PaymentGuard, DXComply and DXSecure, and asks you to book a demo for a number scoped to your scale, regulatory scope and data sensitivity. This is normal for the category rather than a criticism: almost every client-side security vendor prices by quote. It does make evaluation slow, because you cannot sanity-check a number without booking a call.
One first-party tag, added the way your stack already ships code. No DNS change and no CDN change, because your traffic is never routed anywhere.

How much does Feroot DXSecure cost?

1
DXSecure is quoted, not listed
DXSecure sits alongside PaymentGuard, DXComply and HealthData Shield. Feroot lists Assess, Govern and Enterprise tiers for it, with no figures against any of them.
2
Which tier
Assess, Govern and Enterprise are the three tiers, and the feature set steps up at each.
3
Scale
Priced against the size of the estate and the traffic you are protecting.
4
Regulatory scope
PCI alone prices differently from PCI plus HIPAA or privacy and consent governance.
5
Support and SLA
Enterprise support tiers and response commitments are usually a separate line.

What to ask for on the call

A price for only the PCI product, if privacy and healthcare coverage is not what you are buying for
What happens at renewal, and whether the price is fixed for the term
Whether the quote is per domain, per property or by traffic, and what happens when you exceed it
What proportion of sessions are actually inspected on your plan, because coverage in this category is commonly sampled rather than complete
To see an actual PCI evidence pack, not a dashboard screenshot
What the deployment effort is in engineering days, not in calendar time
Our pricing is published, so you can compare a quote against it directly.

Comparing against something published

We can only give you one side of this honestly. Ours: free for 1,000 page views a month, $99/month for 100,000 payment-page views, $499/month at 500,000, $799/month at 1,000,000, overage at $0.0013 per page view, annual billing at 10 months instead of 12.
We have deliberately not built a price comparison table, because we would have to invent the other column. If you obtain a Feroot quote you can compare it against the figures above directly.
Worth saying plainly: Feroot has strong privacy and healthcare positioning, including HIPAA-oriented analysis of tracking scripts, which is a real need that most PCI-focused tools ignore. If that is your problem too, they cover ground we do not. Full detail in the Feroot comparison.
Sources and methodology
PCI DSS requirement text is quoted from PCI DSS v4.0.1 (June 2024), published by the PCI Security Standards Council, which is the current version at the time of writing. Requirements 6.4.3 and 11.6.1 became mandatory on 31 March 2025. Where we describe a competitor, we describe publicly available information and say so when something should be verified with the vendor. We publish this product and that is a bias worth knowing about while you read.
ASK AN AI
Don’t just take our word for it
Ask your assistant what to look for in a tool for PCI DSS 6.4.3 and 11.6.1.

Frequently asked questions

No. Their pricing page lists tier names, Assess, Govern and Enterprise, but no dollar figures, and asks you to schedule a demo for personalised pricing.
Feroot does not publish a figure for DXSecure or for any of their products. The cost comes from a quote scoped to your scale, your regulatory scope and the tier you choose. Ours is published: free for 1,000 page views a month, Pro from $99/month.
Which product you take, which of the three tiers, the scale of your estate, your regulatory scope, and your support level.
They offer a free trial rather than a free plan. Ours is permanent: 1,000 page views a month, both PCI requirements included, no credit card.
Coverage is sampled rather than complete on some configurations, commonly around 10% of sessions. That matters for payloads written to fire rarely, because the sessions that are not inspected are the ones an attacker is aiming at.
We cannot tell you, and any figure quoted second-hand is a guess. The cost you can count on is the evaluation time, because there is no published number to check before the call.
Privacy and healthcare. Their HIPAA-oriented analysis of tracking scripts is genuinely strong and is not something we do.
Session coverage against sampling, whether the 6.4.3 and 11.6.1 records are kept separate, and whether evidence exports in a form your assessor accepts.
No. It is the category norm. It is a cost in evaluation time rather than a sign of anything wrong.
Usually, particularly on multi-year terms and at renewal. Ask what is fixed for the term and what is not.

See every script on your own checkout.

Install the tag, mark your payment pages, and watch the inventory fill in. Free forever on 1,000 page views a month, no credit card.

Free forever plan. No credit card.