Engagement models
Ways to work with us
Pick the model that fits your stage and budget. Every option comes with a fixed quote. No hourly billing surprises.
One-time
Point-in-time assessment
A fixed-scope test of an application, API, app or network, with a full report and free retest.
- Best for launches, audits and customer requests
- Fixed price agreed up front
- Retest and attestation letter included
Ongoing
Continuous security retainer
Regular testing across the year, quarterly vulnerability assessments, and on-call testers for new releases.
- Best for teams that ship often
- Predictable monthly or quarterly cost
- Priority scheduling
Startups
Launch-ready package
A focused test of your core product and its APIs, sized for early-stage budgets, with a report ready for investors and enterprise buyers.
- Best for seed to Series A
- Prioritises what customers and investors check
- Practical, stage-appropriate fixes
Incident response
Forensics on call
Pre-agreed terms so we can start investigating immediately if something goes wrong, without contract delays.
- Best for regulated and high-risk businesses
- Agreed response process
- Support for CERT-In reporting
Pricing
What affects the quote
We price on effort, which depends mainly on scope. A 30-minute call is usually enough for us to give you a fixed figure.
- Number of applications, APIs or mobile apps
- Number of user roles and key features
- Number of IP addresses, hosts or cloud accounts
- Testing approach: black, grey or white box
- Timelines and any out-of-hours testing
- One-off engagement or ongoing retainer
Find out where you're exposed before an attacker does.
Tell us what you need tested. We'll reply within one business day with questions or a fixed quote.