Run Metasploit, Nmap and interactive sessions for free. Pro adds AI automation, advanced visual controls and the tools to manage complete engagements from your phone.
One app. Two tiers. Monthly and annual billing unlock the same Pro features. Prices in USD.
The essential toolkit for hands-on testing.
Free account. No card. No expiry.
Your toolkit stays free. Upgrade whenever you need more.
Automation and advanced controls for complete engagements.
$19 billed monthly. Cancel anytime.
Card subscriptions renew automatically. Cancel anytime from your account.
See exactly what changes when you upgrade.
| Feature | Free | Pro |
|---|---|---|
| Your core toolkit | ||
| Metasploit exploits, auxiliary modules & msfconsole | Included | Included |
| Interactive Meterpreter & shell sessions | Included | Included |
| Engine on your phone or your own Linux agent | Both modes | Both modes |
| Nmap scan profiles | Basic profiles | All profiles, including intensive and comprehensive scans |
| AI & advanced visual controls | ||
| AI agent — your own provider API key | 5 credits per month, up to 1 hour each, shared across conversations | Ongoing access; no Free-tier credit cap |
| Nuclei scan wizard & saved findings | Pro feature | Included |
| Session file explorer, processes, network & monitoring | Terminal access | Terminal + visual controls |
| Payload generation, listeners & post-exploitation screens | Pro feature | Included |
| Workspace & project management | ||
| View saved hosts, services, vulnerabilities, credentials & loot | Included | Included |
| Create/edit records manually & import/export data | Pro feature | Included |
| Workspaces for separate engagements | 1 workspace | Multiple workspaces |
| Open tasks / tabs in Lupus | Up to 3 | No plan limit |
| My Arsenal — custom module & file upload/sync | Pro feature | 50 MB per account; 20 MB per file |
Pro unlocks Lupus's dedicated screens, automation and workflow controls. The raw terminal and bundled third-party command-line tools remain available with Free. Open tasks are Lupus tabs, not a limit on Metasploit jobs. Hardware and root requirements depend on the operation in either plan.
Give each member all Pro features, with one bill and email invitations managed from your account. To share hosts, services, findings and credentials, connect everyone to the same remote agent on your own Linux host. In on-device mode each phone has its own separate database.
Invite members from your account; each uses their own login. How shared engagements work →
No. The Free tier has no expiry and needs no subscription or card. Its workspace and open-task limits are shown above.
Eligible accounts can try Pro features for 7 days. A card trial becomes a paid subscription unless you cancel. The no-card trial stops automatically unless you pay to continue. Trial availability is checked for your account at checkout.
A Free account gets 5 AI credits each calendar month, renewed on the first day at 00:00 UTC without rollover. Each credit opens a window of up to 1 hour shared across all conversations; switching conversations does not spend another credit or extend that window. Time continues while the app is idle. This allowance is separate from the 7-day Pro trial. While Pro is active, the Free-tier credit cap does not apply. A credit authorizes Lupus's agent; it does not pay for model tokens.
Bring your own provider API key, including for free models. Lupus Pro and AI session credits do not include provider tokens. Model availability, usage charges and quotas depend on your provider account.
Both unlock exactly the same Pro features. Monthly renews each month; annual is billed once per year. Crypto prepays the selected period without automatic renewal.
No. Free and Pro both support the on-device engine and a remote agent on your own Linux host. Connecting several phones to the same agent lets them work with that agent's shared database.
Questions about a feature or billing? Contact us · Refund policy
