Pick the bundle that fits your risk profile. Free retesting included, flexible billing, and you can add services as you grow.
Web and API pentesting, a full year of weekly vulnerability scanning, and hands-on remediation support in one package.
Each bundle is a full-year program with flexible billing. Combine all three with Full Stack for comprehensive coverage.
From signed contract to first deliverable in under two weeks.
Not sure which fits? Here's what each covers at a glance.
| Feature | Web + API | Offensive | Defensive | Compliance |
|---|---|---|---|---|
| Testing & Assessments | ||||
| Web Application Pentest | ||||
| Network / Infrastructure Pentest | ||||
| API Security Assessment | ||||
| Compliance PentestSOC 2 / ISO 27001 / PCI DSS | ||||
| Gap Assessment & Readiness Review | ||||
| Continuous Monitoring | ||||
| Attack Surface Management (ASM) | ||||
| SOC as a Service (24/7/365) | ||||
| SIEM & Log Management | ||||
| Endpoint Detection & Response | ||||
| Continuous Compliance Monitoring | ||||
| Vulnerability ScanningWeekly (Web+API) / Quarterly (Offensive) | ||||
| Reporting & Support | ||||
| Free Retesting | ||||
| Executive Reports | ||||
| Auditor-Ready Reporting | ||||
| Client Portal Access | ||||
| Incident Response Retainer | ||||
| Pricing | ||||
| Pricing | Contact us for a custom quote → | |||
Yes. We can adjust your program at any quarterly renewal. Need to add compliance testing because you landed a new enterprise customer? Just let your account manager know and we'll scope the change.
Every bundle includes access to our client portal where you can track findings, view remediation status, download reports, and communicate with your assigned team. No additional software to manage.
We typically kick off within 1–2 weeks of a signed contract. Book a scoping call and we'll walk through your environment, agree on a schedule, and get you a statement of work within 48 hours.
Yes. The Offensive and Compliance bundles include dedicated retesting hours (24 hrs and 16 hrs respectively) so your developers can fix findings and we confirm the fix at no extra cost.
Absolutely. The Full Stack Bundle combines all three for comprehensive coverage. Or mix two: Offensive + Compliance is a common combination for startups on the SOC 2 path. Contact us for a custom quote.
These bundles are designed specifically for startups, with flexible billing so there's no large upfront commitment. Contact us for a tailored quote based on your needs.
Book a free scoping call. We'll review your environment, recommend the right bundle, and give you a custom quote -- no pressure.
Hi, I'm Lory! Need help finding the right service? Click to chat!
