SecaFixed scope. Fixed price.
Prices below are starting points. The final quote depends on application count, roles, endpoints and network size — and it is agreed before we start. No surprise invoices.
Scout
Single surface — what we test
$499 from
- One web app or one API
- Up to 5 user roles
- About 5 testing days
- Full manual test, no scanner dump
- One retest included
Most chosen
Strike
App plus API — what we test
$699 from
- Web app and its API, or small network
- Up to 10 user roles
- About 10 testing days
- Remediation call included
- One retest included
Perimeter
Custom scope — network and AI testing
Custom up to $999
- Internal or external network
- AI / LLM systems and agents
- Multi-application programs
- Quarterly rhythm available
- Retest policy by agreement
All prices USD, Including tax. Quotes valid for 30 days.
Every plan includes
Same deliverables on every tier — see the manual testing method behind them.
- Senior human testers — exploit chains, not CVE lists.
- Working proof of concept — every finding ships with one.
- Retest — we verify your fixes before you close the ticket.
- Plain-English reporting — investors and engineers, both served.
- Fixed invoice — the quote you approve is what you pay.
Add-ons
Layer on when you need them. Priced separately, never bundled by surprise.
- Leaked credentials checkDark-web and breach-data review against your domain and staff emails.
- Architecture reviewA threat-modeling session on your design before the next release.
- Priority slotSame-week start when a deal or audit deadline is close.
- Quarterly rhythmRecurring engagements at a program rate as your surface grows.
Pricing questions
What changes the penetration testing price?
Number of applications and endpoints, user roles and permission models, whether
authentication is complex (SSO, MFA, biometrics), and network size for infrastructure scopes.
Is the retest really free?
Yes, one retest of all reported findings within 30 days of delivery. Beyond that,
retests are priced hourly.
Do you offer discounts for pre-revenue startups?
Ask. We keep a small number of startup rates each quarter. Bring your cap table stage
and we will be straight with you.
What is not included?
Continuous monitoring, bug bounty management and compliance certification. We will tell
you honestly if you need those and roughly what they cost.
Thirty minutes to a fixed price.
Send your scope, get a quote back, approve in one meeting.