Understand entitlements and services

Before you read billing state

Use this page when Billing shows a disabled plan, a confusing credit balance, a pending checkout state or a project that cannot start the workflow you expected. Billing state is account-scoped. Public [Pricing](/pricing) explains what the product sells, but authenticated [Billing](/billing) decides what this account can actually use now. The project page decides whether one project can connect and use that coverage.

Read account entitlement state

Follow the path `Billing → Account entitlements → Credit balance → Project usage and dependencies → Project services`.

1. Open /billing while signed in to the account that owns the project or subscription. Result: the Billing page shows account-specific payment provider, entitlement, credit and plan state instead of public pricing copy.
2. Read Payment provider before starting checkout. Result: you know whether Paddle checkout and webhook confirmation are ready or whether the page is waiting on provider configuration.
3. In Account entitlements, confirm the account name, billing email, active plan, scan credits, fix credits, monitoring and agency allowance. Result: you know what the account owns globally.
4. In Credit balance, compare Avail, Res and Spent for each credit type. Result: you do not treat reserved credits or spent ledger history as usable capacity.
5. Review Project usage and dependencies. Result: you can see which project services are enabled, paused, blocked or waiting on account coverage.
6. Review the plan ladder and Credit top-ups for Scan Plan, Monitor Plan, Fix Plan, Agency Plan and exhausted-allowance top-ups. Result: you know whether a plan or top-up can open checkout now, is missing provider IDs or is unavailable for this account.
7. Return to the project page's Project services area. Result: you know whether the next action is Enable service, Resume service, accept scan scope, verify the domain, wait for payment confirmation or switch accounts.

Interpret credit balances

Credits are account-owned. Switching accounts changes which credits, transactions, subscriptions and project service dependencies you see. When Billing is ready, the account should show usable credits, active coverage or an enabled checkout action. The project service should point to the next project step.

• Avail is the usable balance after confirmed provider events and product reservations.
• Res is already held for a pending scan, fix or billing workflow and should not be counted as free capacity.
• Spent is ledger history; it explains previous consumption but cannot be reused.
• Scan credits are consumed by eligible live scan workflows after project, scope, domain and activation-scan service checks pass.
• Automated fix credits are consumed only after report evidence exists, the finding is eligible and the project fix workflow service is connected.
• Monitoring coverage lets an eligible project enable recurring checks after a baseline report exists.
• Agency client projects may spend the agency billing account allowance, not the client account currently being viewed.

Resolve blocked entitlement states

• Payment confirmation pending means checkout started, but the Paddle webhook has not granted the entitlement. Wait on Billing until the status changes before starting the workflow.
• Provider IDs pending means the paid plan or add-on exists, but checkout cannot open until provider configuration is present.
• Deferred means the item is visible for comparison but not currently buyable. Choose the available plan named in the disabled reason.
• Plan unavailable for this project means project type, accepted scope or buyer classification does not match the plan rule.
• Credit exhausted means buy an eligible top-up, upgrade to the plan with the needed allowance, or wait for renewal.
• Wrong account means switch to the account that owns the project, subscription, agency allowance or credit ledger.
• Project service blocked means return to the project and fix the exact project prerequisite shown there before buying more coverage.

Continue to the correct project service

After the Billing page explains account coverage, continue to the project service or billing page for the workflow you are trying to unblock.

• For a first paid scan, open the project and enable Activation scan, then use [Activation scans](/docs/billing/activation-scans).
• For additional scan capacity, open [Scan credits](/docs/billing/scan-credits), then return to the project service.
• For report remediation, open [Automated fix credits](/docs/billing/automated-fix-credits), then return to the report or project fix workflow.
• For recurring checks, choose Monitor Plan or a stronger included plan, then open the project Monitoring service and [Monitoring plans](/docs/billing/monitoring-plans).
• For finance records, open [Invoices and receipts](/docs/billing/invoices-and-receipts).