Each subsequent Tier includes the features of the previous.
*Final pricing depends on size, applications in scope, and testing objectives.*
Tier 1: Code Review & Scan
Starting at $150
- Automated SAST + dependency/vulnerability scanning of source code
- Manual review of authentication, input handling, and other high-risk areas
- Findings report with severity ratings and remediation guidance
- 1 included rescan to verify fixed issues
Tier 2: Application Pentest
Starting at $500
- Full manual + automated pentest of one web/app (OWASP Top 10, auth & session handling, business logic flaws, API endpoints if present)
- Both unauthenticated and authenticated testing (if the app has login roles)
- Detailed report: findings, risk ratings, proof-of-concept, remediation steps
- 1 included retest live re-validation of fixed vulnerabilities, not just a rescan
Tier 3: Premium App Pentest + Advisory
Starting at $1200
- Tier 2, plus deeper coverage: multiple roles/permission levels, API/mobile companion app included if applicable
- Threat modeling / attack path analysis specific to the app's business logic
- Executive summary + full technical report
- 2 retests
- 30-min walkthrough call to review findings