Reflectiz pricing
There are no public figures. Here is what drives the quote, what to ask for, and an honest comparison against something that does publish.
TL;DR
Reflectiz pricing
NO PUBLISHED FIGURES
Reflectiz is quote-based, like almost everyone in this category. Any number you find online is second-hand and probably stale.
WHAT DRIVES THE QUOTE
How many website flows you monitor, how often they are scanned, which modules you take, and your support tier.
THE COMPARISON PROBLEM
You cannot compare quote-based products without running sales cycles, which is a real cost in time.
Short on time? We publish ours, which is the only figure on this page we can state with certainty. See it.
How much does Reflectiz cost?
Reflectiz does not publish pricing, so the cost depends on a quote scoped to how many website flows you want monitored, how often they are scanned, which core capabilities you take, and which add-on modules you need. This is normal for the category rather than a criticism: almost every client-side security vendor prices by quote. It does make evaluation slow, because you cannot sanity-check a number without booking a call.
One first-party tag, added the way your stack already ships code. No DNS change and no CDN change, because your traffic is never routed anywhere.
What drives the quote
1
Website flows
Scoped by how many flows you want watched, so a large estate costs more than a single checkout.
2
Monitoring interval
Real-time scanning costs more than a weekly check, and the interval you buy is your detection delay.
3
Add-on modules
The PCI DSS 4 compliance dashboard and the enhanced trackers dashboard are priced on top of the core product.
4
Support package
Customer success and support tiers are selected separately, so compare like for like.
5
Contract length
Multi-year commitments usually attract a discount, as with most enterprise software.
What to ask for on the call
A price for only the monitoring you need, without the add-on dashboards, if that is all your scope requires
What happens at renewal, and whether the price is fixed for the term
Whether the quote is per flow, per domain or by scan frequency, and what happens when you exceed it
How often your pages are actually scanned on the tier you are quoted, because that interval is how long a change goes unseen
To see an actual PCI evidence pack, not a dashboard screenshot
What the deployment effort is, given there is no tag to install and nothing to ship
Our pricing is published, so you can compare a quote against it directly.
Comparing against something published
We can only give you one side of this honestly. Ours: free for 1,000 page views a month, $99/month for 100,000 payment-page views, $499/month at 500,000, $799/month at 1,000,000, overage at $0.0013 per page view, annual billing at 10 months instead of 12.
We have deliberately not built a price comparison table, because we would have to invent the other column. If you obtain a Reflectiz quote you can compare it against the figures above directly.
Worth saying plainly: Reflectiz needs no code change at all, which is a real advantage if you cannot ship a tag. The trade is that scans run from a datacentre rather than from real sessions, so a payload aimed at a slice of your traffic can be missed entirely. Full detail in the Reflectiz comparison.
Sources and methodology
PCI DSS requirement text is quoted from PCI DSS v4.0.1 (June 2024), published by the PCI Security Standards Council, which is the current version at the time of writing. Requirements 6.4.3 and 11.6.1 became mandatory on 31 March 2025. Where we describe a competitor, we describe publicly available information and say so when something should be verified with the vendor. We publish this product and that is a bias worth knowing about while you read.
ASK AN AI
Don’t just take our word for it
Ask your assistant what to look for in a tool for PCI DSS 6.4.3 and 11.6.1.
Frequently asked questions
No. Reflectiz is quote-based, which is the norm in this category. Ours is published: free for 1,000 page views a month, Pro from $99/month, overage at $0.0013 per page view.
On how many website flows you monitor, the monitoring interval you choose, which core capabilities you take, and which add-on modules you add, such as the PCI DSS 4 dashboard or the trackers dashboard.
Expect a discovery call before a number, which is typical for quote-based vendors. Budget a week or two of calendar time if you are comparing several products.
We cannot tell you, and anyone who quotes you a figure second-hand is guessing. What we can say is that the evaluation costs you time, because there is no number to sanity-check before the call.
Not one they publish. We have a permanent free plan of 1,000 page views a month with both PCI requirements included and no credit card.
Yes, and that is their genuine strength. No tag, no code change. The trade is that a remote scan sees the page a scanner was served, not the page your customer received.
It is less likely to. A payload that fires only for one country, one card BIN or one hour may never appear in a scheduled scan from a datacentre.
Scan interval against continuous coverage, whether the product can block as well as report, and whether the evidence exports in a form your assessor will accept.
No. It is the category norm and often reflects genuinely variable scope. It is a cost in evaluation time rather than a sign of anything wrong.
Usually, particularly on multi-year terms and at renewal. Ask what is fixed for the term and what is not.
Related articles
Comparisons
Best client-side security tools in 2026
Thirteen tools, each with real pros and real cons, and an honest statement of our own bias.
Comparisons
Does Cloudflare make you PCI compliant?
What the WAF, the CDN and Page Shield each do for 6.4.3 and 11.6.1, and what they leave with you.
Comparisons
Best PCI compliance software in 2026
Full-scope platforms and client-side tools are different categories. Both lists, kept apart.
PCI DSS
PCI DSS compliance: a practical guide for 2026
What the standard covers, what changed in v4.0.1, and where the two client-side requirements fit.
See every script on your own checkout.
Install the tag, mark your payment pages, and watch the inventory fill in. Free forever on 1,000 page views a month, no credit card.
Free forever plan. No credit card.