Scan Ninja
Managed vulnerability remediation and SOC 2 / CMMC readiness delivered by security experts on a tenant-isolated AI platform.
Company basics
- HQ
- United States
- Delivery model
- Hybrid (shared operation)
- Pricing model
- Outcome-based
Scope
- Industries
- CybersecurityProfessional Services
- Regions
- United States
- Languages
- English (site only)
About Scan Ninja
Scan Ninja finds security gaps, fixes what matters, collects audit evidence and takes teams through SOC 2 or CMMC readiness. The company says experts own the outcome, with a US-based team and no offshore staff, using a tenant-isolated AI platform. Its three engagements are SOC 2 readiness for SaaS, AI and cloud startups, CMMC readiness for defense, space and aerospace contractors, and managed vulnerability remediation for teams with scanner findings. Engagements are priced for the outcome rather than per seat or per asset, and a 14-day trial of Security Essentials is offered. Scan Ninja Inc. is a Texas C-corporation based in Houston and describes itself as a service-disabled veteran-owned business.
What they do
Pricing
- Pricing model
- Outcome-based
- Published starting price
- Not published
- Pricing page
- View pricing
Evidence of outcomes
CNo publicly verifiable outcomes yet.Self-described service; no customer outcome or named client found. Homepage says SOC 2 audit in progress while the security page says certified, so soc2 is left unstated. HQ Houston, Texas per homepage and terms.
A: third-party verifiable outcomes · B: outcomes reported by the company or its investors · C: no publicly verifiable outcomes yet. Demos, forecasts and slogans do not count.
FAQ
What does Scan Ninja deliver?
Managed vulnerability remediation, SOC 2 readiness and CMMC readiness, with experts owning the outcome on top of its AI platform.
How is Scan Ninja priced?
The pricing page says every engagement is priced for the outcome and scoped to your environment, with unlimited assets and users and no per-seat fees; no price list is published.
Does it use customer data to train AI?
The security page says your data is not training data and the AI is tenant-isolated and never shared.
Is Scan Ninja SOC 2 certified?
The homepage says its own audit is in progress while the security page says certified, so ask for the report and its dates.
Our read
Editorial view based on public information — not an endorsement.
Capabilities
| Check | Status | Source |
|---|---|---|
| End-to-end delivery (you don't operate the tools) | Confirmed | Source · checked 2026-10-02Homepage: finds gaps, fixes what matters, collects audit evidence and gets you through SOC 2 or CMMC. |
| Human review included | Confirmed | Source · checked 2026-10-02Homepage: experts own the outcome; US-based team. |
| Signed off by licensed professionals (CPA, attorney…) | Not stated | — |
| Works inside your existing systems | Not stated | — |
| Private / on-prem deployment available | Not stated | — |
| API or data export | Not stated | — |
| Multilingual delivery | Not stated | — |
Commitments
| Check | Status | Source |
|---|---|---|
| Public delivery SLA | Not stated | — |
| Outcome-based pricing | Confirmed | Source · checked 2026-10-02Pricing page: pay for outcomes, priced per engagement. |
| Refund / satisfaction guarantee | Not offered | Source · checked 2026-10-02Terms: service provided as is, warranties disclaimed. |
| Customer data not used for training | Confirmed | Source · checked 2026-10-02Security page: your data is not training data; tenant-isolated AI. |
| SOC 2 | Not stated | — |
| ISO 27001 | Not stated | — |
| HIPAA | Not stated | — |
| GDPR | Confirmed | Source · checked 2026-10-02Security page states compliance with EU data protection rules (self-statement). |
| Named party responsible for outcomes | Confirmed | Source · checked 2026-10-02Terms: liability limited to fees paid in the preceding 12 months. |
Funding
Not disclosed
How we check
Every check below links to its source and shows when we checked it. "Not stated" means we found no public statement — it does not mean "no".
Other routes
Use a tool yourself
Get it implemented
Sources
- Company website: https://scanninja.ai/
- Outcome-based pricing: https://scanninja.ai/pricing
- Refund / satisfaction guarantee: https://scanninja.ai/legal/terms-of-service
- Customer data not used for training: https://scanninja.ai/legal/security
Change history
- 2026-10-02 · Listed on Toolsfine