API penetration test
Authorization flaws, data exposure and abuse paths in your REST or GraphQL API.
$3,000 per API
View detailsNo payment is taken online. When we call you within the hour we confirm the scope and send an invoice (ACH, card or crypto).
After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.
Web application penetration test
A hands-on test of one web application, including login, roles and business logic, not only an automated scan.
Assessments and testing
What is included
- Manual testing of one web application against a recognized standard
- Test accounts for each user role
- Authentication, session, access control and input handling checks
- A report with proof for each finding and how to fix it
- One retest within 60 days
Delivery
Report within 10 business days of kickoff.
Good to know
Can you test production?
Usually a staging copy is safer. We recommend one and agree it with you in the scope.
Testing of any kind happens only inside a written scope and rules of engagement that you sign before work begins. See all services.
Often bought together
Remediation support
Engineer hours to help your team fix what an assessment or test found: configuration changes, patching plans and retests of the fixes.
$220 per hour
View detailsVirtual CISO hours
A senior security leader on call for your board, your auditors and your hardest decisions. Buy hours by the month.
$275 per hour, per month
View details