Home / Pricing

Clear, scope-based pricing

Every plan includes a manually validated report, an executive summary and a free retest once your team ships the fixes. The price is agreed in writing before work begins.

Essential

One website or small environment. Ideal for startups and single-product teams.

$300from

per engagement

  • 1 web application or up to 10 hosts
  • External network & perimeter testing
  • OWASP Top 10 coverage
  • All findings manually validated
  • Findings report + executive summary
  • Free retest after remediation
  • Email support
Get started

Advanced

Larger environments, internal networks and regulated businesses.

$1,200from

per engagement

  • Up to 250 hosts / multiple apps
  • Everything in Professional
  • Internal network & Active Directory
  • Cloud config review (AWS / Azure / GCP)
  • Attack path diagram
  • Compliance-mapped report (ISO 27001, SOC 2, PCI DSS)
  • Named engagement lead
Get started

Enterprise

Multi-region estates, continuous testing or managed security programmes.

Custom pricing

scoped with your team

  • Unlimited scope & 250+ hosts
  • Everything in Advanced
  • Continuous / quarterly testing programme
  • 24/7 emergency response retainer
  • Dedicated engineer & SLA
  • Custom reporting & client portal access
  • Data residency options (US / UK / India)
Contact our team

All prices are indicative starting points in USD and depend on final scope, which we confirm in writing before testing begins. Already hacked? Emergency incident response is quoted separately and handled 24/7 — contact us immediately.

Included in every plan

What you always get

These are not upsells. They come with the smallest engagement and the largest one alike.

NDASigned before scoping begins
FixedPrice agreed in writing before we start
FreeRetest after you ship the fixes
100%Findings manually validated
Pricing questions

Before you choose

How do you decide the final price?
Scope drives price: the number of hosts or applications, whether testing is authenticated, whether internal network and cloud are included, and how quickly you need it. We confirm the exact figure in writing before any work starts — it never changes mid-engagement.
Can the price change once work has started?
No. The figure we confirm in writing is the figure you pay. If you later want the scope widened, we quote that separately and you decide before anything else is done.
What if my environment sits between two plans?
We quote for what you actually have rather than forcing you into a tier. The plans above are reference points, not rigid packages.
Is the retest charged separately?
No. One retest of the original findings is included in every plan. If you need repeated testing across a long remediation programme, that is an Enterprise arrangement.
How is emergency incident response priced?
Separately from the plans above, because scope is unknown until we contain the incident. Contact us immediately and we begin containment first — commercials are agreed alongside, not before.

Ready to find out where you stand?

Tell us what you'd like tested and we'll scope an engagement — with a fixed price agreed in writing and a free retest once you've shipped the fixes.

Request an assessment