Fixed prices. No surprise invoices.
Every engagement starts with a free scoping call and a written fixed quote. These are starting prices; your quote depends on the size of your app and infrastructure.
| Package | Best for | Starts at | Includes |
|---|---|---|---|
| App Security Review | Pre-launch check of an AI-built app | USD 1,500 | Review, findings report, retest |
| App Security Review + Fix | Same, plus we fix it | USD 3,000 | Review, pull requests, regression check, retest |
| Penetration Test | Enterprise deals and audit evidence | USD 3,500 | Manual test, auditor-ready report, retest, closure letter |
| Cloud & Infra Audit | Risky or messy infrastructure | USD 2,000 | Audit, prioritised findings, roadmap |
| Infra Fix Sprint | Turning the audit into reality | USD 4,000 | Infrastructure as code, runbooks, handover |
| Compliance Gap Assessment | Knowing where you stand | USD 2,500 | Gap report and priority list |
| SOC 2 or ISO 27001 Readiness | Getting through the audit | USD 9,000 | Controls, policies, evidence, audit support |
| Incident Response | Something is wrong now | USD 1,000 triage | First 24 hours, then scoped |
| Security Retainer | Ongoing security and DevOps | USD 1,500 / month | Monitoring, patching, access reviews, priority response |
Annual planOne full pentest, two lighter check-ins and all retests, billed yearly at a discount.
Terms50% to start, 50% on report. NDA and written authorisation before any testing.