Scoped per engagement,
no cookie-cutter packages
Honest pentesting can’t be sold in a box — cost depends on scope and depth. You get a fixed quote after a short scoping call.
What drives the price
Transparent, no surprises on the invoice.
Scope
How many apps, endpoints, hosts or roles are in scope.
Depth
Black-box, grey-box or white-box with source access.
Type of work
Pentest, red team, cloud audit or compliance-driven testing.
Timeline
Standard schedule or a rush start against a deadline.
Engagement formats
We match the format to your situation.
One-off pentest
- Fixed quote
- Report with PoC
- Free retest
- Named point of contact
Retainer
- Recurring testing
- Release testing
- Priority access
- Discount vs one-off
Compliance-driven
- ISO 27001 / PCI DSS
- NIS2 / DORA / GDPR
- Auditor-ready report
- Conformance retest
FAQ
Why don’t you publish fixed prices?
Because honest scope varies wildly. A single API and a 30-app estate aren’t the same job. You get a fixed quote after a 20-minute scoping call — no surprises after that.
What’s included in the price?
Scoping, manual testing, a report with reproducible PoCs and remediation, and a free retest of the fixed findings. A named point of contact throughout.
Is a retainer cheaper than one-off tests?
Yes — recurring engagements come at a lower per-test rate and give you priority scheduling for release testing.
How fast can you start?
Standard lead time is short; rush starts against a deadline are possible and quoted separately.
How do we pay?
Invoice per engagement, or monthly for retainers. Payment details are agreed during scoping.