No payment is taken online. When we call you within the hour we confirm the scope and send an invoice (ACH, card or crypto).

After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.

API penetration test

Authorization flaws, data exposure and abuse paths in your REST or GraphQL API.

Assessments and testing

What is included

Report within 8 business days of kickoff.

Do you need our API documentation?

It helps and shortens the test. If there is none, we build a schema from traffic during the first day.

Testing of any kind happens only inside a written scope and rules of engagement that you sign before work begins. See all services.

A hands-on test of one web application, including login, roles and business logic, not only an automated scan.

$3,500 per application

Engineer hours to help your team fix what an assessment or test found: configuration changes, patching plans and retests of the fixes.

$220 per hour

Static analysis and secret detection across one codebase, reviewed by an engineer so you get findings, not noise.

$500 per codebase