Pricing

Transparent, fixed pricing

Fixed scope, fixed price, no surprise costs.

AI-assisted automationFast supportInvoicedEnd-to-end encrypted report
Entry

Basic Scan

The ideal starter package to quickly gauge your site’s external security posture and close basic risks.

Scope: HTTP security headers · SSL/TLS configuration · Server & tech disclosure · Basic config files (robots.txt, assetlinks) · Platform-specific ready-to-use fix snippets (Nginx, IIS, Vercel, etc.).
Freeinstant pre-scan
An external-surface pre-assessment; no active penetration test or in-depth code audit.
Try NowView sample report
★ Popular20% off

External Surface & Configuration Bundle

Reviews your external configuration posture together: SSL/TLS, security headers, DNS/email, CORS and CSP. Discounted vs buying separately.

Includes: SSL/TLS Configuration Audit · Security Headers & Information Leakage · DNS & Email Security · CORS & Cookie Security · CSP (Content Security Policy) Analysis
£111£89incl. tax
Starts shortly after payment
Buy NowView sample report
20% off

Discovery Bundle

A deep discovery bundle that maps your external attack surface and detects abandoned/exposed assets.

Includes:
  • ·Abandoned subdomain (takeover) scan — subdomain inventory from Certificate Transparency logs
  • ·Public API / Swagger documentation discovery
  • ·CMS & technology fingerprint analysis
  • ·Admin/sensitive path detection from the site map

Passive external-surface discovery; no active endpoint injection or authenticated testing.

£124£99incl. tax
Starts shortly after payment
Buy NowView sample report
20% off

Active Verification Bundle

All seven active-light verification checks in one bundle: Injection, IDOR, SSRF, File Upload, Business Logic, Race/Mass-Assignment and RCE. Proves presence, never exploits; a single authorization declaration covers all. Strongly discounted vs buying separately. Scope: this bundle tests the unauthenticated (no-login) surface. Deep authorization/business-logic vulnerabilities that only appear after login are out of scope; results depend on the target’s structure.

Includes: Vulnerability Verification — Injection (SQLi/XSS) · Vulnerability Verification — Broken Access (IDOR) · Vulnerability Verification — SSRF · Vulnerability Verification — File Upload · Vulnerability Verification — Business Logic · Vulnerability Verification — Race / Mass Assignment · Vulnerability Verification — RCE / Command Injection
£311£249incl. tax
Starts shortly after payment
Buy NowView sample report
★ Most Complete20% off

Full-Scope Pentest Bundle

A deep, deterministic security scan after login with a TEST account you provide: authenticated injection/IDOR, authorization & session, client-side/JS, API (OWASP API Top 10), CORS & security headers, TLS, configuration exposure and email/DNS. No exploitation; results vary with the target’s surface.

What we examine:
  • Authenticated Deep Scan — cookie/session/authorization, authenticated injection (SQLi/XSS) and IDOR indicators, forced browsing, privilege escalation, multi-step business logic
  • Client-Side & JS Analysis — JS bundle/secret scan, source-map exposure, known-vulnerable libraries, DOM-XSS/postMessage/browser-storage, SRI / reverse-tabnabbing / open-redirect
  • Session, CSRF & Authentication Depth — CSRF, session entropy/fixation, account enumeration, weak lockout, password policy, MFA observation
  • API Security (OWASP API Top 10) — BOLA/BFLA, excessive data exposure (BOPLA), rate-limit, shadow API versions, GraphQL introspection
£436£349incl. tax
Starts shortly after payment
Buy NowView sample report
Comparison

Compare packages side by side

See what each package covers in one table. Values come from the package definitions.

Find the right package

Three questions; guidance only, not a commitment.

Is this your first scan?

What is your priority?

You can scroll the table sideways.

Basic Scan

Price (VAT incl.)
Free
Test type
Passive observation
Number of checks
Entry level
Scope
HTTP security headers, SSL/TLS, server & technology exposure
Evidence-based findings
✓
Sample report (PDF)
✓
DNS ownership verification
✗
Method
Deterministic
Best suited for
First-time scans
View

External Surface & Configuration Bundle

Popular
Price (VAT incl.)
£89
Test type
Passive observation
Number of checks
5 checks
Scope
SSL/TLS, security headers, DNS/email, CORS, CSP
Evidence-based findings
✓
Sample report (PDF)
✓
DNS ownership verification
✗
Method
Deterministic
Best suited for
Teams wanting the full external configuration picture
View

Discovery Bundle

Price (VAT incl.)
£99
Test type
Passive observation
Number of checks
3 checks
Scope
Subdomain takeover, API discovery, CMS/known CVE
Evidence-based findings
✓
Sample report (PDF)
✓
DNS ownership verification
✗
Method
Deterministic
Best suited for
Teams mapping their attack surface
View

Active Verification Bundle

Price (VAT incl.)
£249
Test type
Active-light verification
Number of checks
7 checks
Scope
Injection, IDOR, SSRF, file upload, business logic, race, RCE (no-login surface)
Evidence-based findings
✓
Sample report (PDF)
✓
DNS ownership verification
✓
Method
Deterministic
Best suited for
Teams needing proof a weakness is real
View

Full-Scope Pentest Bundle

Most Complete
Price (VAT incl.)
£349
Test type
Active-light verification
Number of checks
2 checks
Scope
Deep post-login scan with a test account + API (OWASP API Top 10)
Evidence-based findings
✓
Sample report (PDF)
✓
DNS ownership verification
✓
Method
Deterministic
Best suited for
Teams wanting a comprehensive assessment
View

Sample Reports

See what you get

Preview each package’s sample report as a PDF before buying.

Basic ScanPDFExternal Surface & Configuration BundlePDFDiscovery BundlePDFActive Verification BundlePDFFull-Scope Pentest BundlePDF

To begin

Verification is free

You only pay when you start a scan. Get started by verifying your domain.

Verify Free & Start