Web application penetration test
A hands-on test of one web application, including login, roles and business logic, not only an automated scan.
$3,500 per application
View detailsNo payment is taken online. When we call you within the hour we confirm the scope and send an invoice (ACH, card or crypto).
After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.
Scanning of software codebase
Static analysis and secret detection across one codebase, reviewed by an engineer so you get findings, not noise.
Assessments and testing
What is included
- Static analysis of one repository (up to 500,000 lines)
- Detection of leaked keys, tokens and credentials
- Dependency check for known vulnerable libraries
- Engineer review to remove false positives
- A report with the fix for each finding
Delivery
Report within 3 business days of read-only access.
Good to know
Do you keep our code?
We work from read-only access you grant and remove it when the engagement ends. Nothing is retained after delivery of the report beyond the report itself.
Which languages are covered?
Most mainstream languages and frameworks. Tell us yours at checkout and we confirm before work starts.
Testing of any kind happens only inside a written scope and rules of engagement that you sign before work begins. See all services.
Often bought together
Remediation support
Engineer hours to help your team fix what an assessment or test found: configuration changes, patching plans and retests of the fixes.
$220 per hour
View detailsVirtual CISO hours
A senior security leader on call for your board, your auditors and your hardest decisions. Buy hours by the month.
$275 per hour, per month
View details