How credits work
Credits are consumed based on two factors:- Model usage: the reasoning and decision-making Neo performs across each task, including multi-step planning, tool selection, and result analysis.
- Infrastructure: the compute resources Neo uses, including isolated sandboxes, browser automation, terminal sessions, network probes, and file storage.
Typical credit ranges by workflow
| Workflow | Standard Intelligence (credits/run) | Maximum Intelligence (credits/run) | What Neo does |
|---|---|---|---|
| Pentest | 25-75 | 50-300 | Full-scope security assessment: reconnaissance, attack surface mapping, hypothesis-driven testing, exploitation attempts, proof-of-concept generation, and a detailed findings report with reproduction steps. |
| Reconnaissance | 5-10 | 25-50 | Maps your external attack surface: discovers subdomains, enumerates exposed services, fingerprints technologies, identifies open ports, and produces a structured inventory of assets with risk annotations. |
| PR / Feature Pentest | 5-50 | 25-200 | Targeted security review of a pull request or new feature: analyzes code changes, identifies security-relevant logic, validates findings against the running application, and tests for auth bypasses, injection points, and business logic flaws within the scope of the change. |
| Threat Model | 5-15 | 20-100 | Analyzes your application architecture, identifies trust boundaries, enumerates threat vectors, and produces a structured threat model with prioritized risks and recommended mitigations. |
| Vulnerability Triage | 5-10 | 25-50 | Takes a reported vulnerability or scanner finding, validates exploitability in your environment, deduplicates against known issues, assesses real-world impact, and produces an actionable ticket with reproduction steps and remediation guidance. |
Standard Intelligence is our recommended mode for most teams. It covers the full workflow with strong results at 4x fewer credits, the best balance of coverage, accuracy, and cost efficiency.Maximum Intelligence includes exhaustive planning, exploitation, and verification. Best for novel attack chains, complex multi-step exploitation, and edge cases needing the highest reasoning power.
Actual credit consumption varies based on application complexity, scope of the target, depth of testing, and how many tools Neo needs to invoke during execution.
Top-up credits
If you run out of subscription credits mid-month, you can purchase additional credits as a top-up. Top-up credits are available to all active subscribers and are shared across your team. Top-up credits expire 12 months from the date of purchase. They are consumed after your monthly subscription credits are used up. There are limits on how many top-up credits you can purchase per month:- Standard accounts: 50 to 100 credits per month
- Verified accounts: 50 to 1,000 credits per month
How Neo keeps credits efficient
Neo is engineered to make every credit go further through deliberate architecture decisions and purpose-built tooling.- LLMs for reasoning, not everything. Neo uses LLMs where they genuinely add value: reasoning about security context, generating hypotheses, planning attack paths, and interpreting ambiguous results. For everything else, 40+ specialized tools handle the mechanical work natively without burning tokens. Your credits fund actual security reasoning, not schema parsing.
- Caching to reduce redundant work. Neo applies caching at multiple layers to avoid repeating work. When Neo has already reasoned about a particular context, gathered environment details, or resolved a piece of your application’s behavior, that knowledge is retained and reused across task steps and future runs.
- Built on infrastructure that runs at scale. ProjectDiscovery’s open-source tools power vulnerability scanning for some of the largest security teams in the world. The same infrastructure engineering that makes Nuclei fast and reliable at scale runs under Neo’s sandboxed environments, keeping execution efficient and credit consumption proportional to the work being done.