Everything we do,
and what it costs.

Lorikeet Security works with startups and mid-market companies across four disciplines: we test your systems, get you through your audit, watch the estate the rest of the year, and run Lory against it in between. Every price on this page is real, and every finding is reviewed by a human.

CREST Certified OSCP Certified Free Retesting Auditor-Ready Reports

Book a Scoping Call Full rate card

What We Do

Four disciplines, one team

A penetration test is a controlled attack against your systems to find vulnerabilities before a real attacker does — that is where most clients start. From there we map the same work to whatever framework your auditor uses, run detection and response so someone is watching the other fifty weeks of the year, and put Lory on your assets in between engagements.

Close deals faster

Enterprise buyers require a pentest report before signing. SOC 2 and ISO 27001 auditors need one for your audit package. We deliver reports formatted for both.

Prevent breaches

The average cost of a data breach is $4.88M. A pentest costs a fraction of that and finds the vulnerabilities that lead to breaches before they happen.

Stay compliant

SOC 2, PCI DSS, ISO 27001, HIPAA, and CMMC all require or strongly recommend regular penetration testing. Our reports map directly to these frameworks.

Our Services

All 57 services, priced

Every engagement is scoped to your environment — no cookie-cutter approaches. Prices are the starting point for a typical scope. Click any service to see what we test and how.

Security Testing

22 services

A controlled attack against your systems, run by people, so you find the holes before someone else does. Every test ends in a report you can hand to an engineer and a round of free retesting once you have fixed things.

Web Application Pentest $9,500 API Penetration Testing $8,500 Network & Infrastructure $8,000 Cloud Pentesting $12,000 Mobile App Pentest $10,500 Active Directory $12,500 Container & Kubernetes $9,500 AI Agent & LLM Pentest $11,000 Security Code Review $6,500 Vibe Coding Review $4,500 Desktop Application $10,000 Wireless Pentesting $5,500 Social Engineering $7,500 Phishing Simulation $3,500 Physical Pentesting $9,500 IoT & Hardware $16,000 Smart Contract Audit $15,000 ATM & Banking Terminal $15,000 Vending & Kiosk $12,000 Red Team Operations $35,000 Vulnerability Scanning $250/scan Retesting & Validation Included

Compliance Readiness

10 services

There is no such thing as a “SOC 2 pentest” — it is one pentest, scoped and reported so your auditor accepts it as evidence. We map the same engagement to whichever framework you are being held to, and cover the rest of the readiness work around it.

Compliance-Scoped Pentest $8,500 Federal & Defense Scope $18,000 Gap Assessment $6,500 Policies & Procedures $4,500 Evidence & Audit Support $5,500 Access Reviews $3,500 Findings Remediation $4,000 vCISO / Security Retainer $4,000/month Security Advisory $350/hour VC Due Diligence $7,500

Reported against SOC 2 ISO 27001 PCI-DSS HIPAA CMMC FedRAMP HITRUST GDPR NIST CSF NIS2 DORA SOX GLBA CCPA/CPRA CIS CASA/MASA

Detection & Response

21 services

Testing tells you where you are weak. This is the half that watches the estate the rest of the year, and the number you call at 2am when something has already gone wrong.

Managed Detection & Response $2,800/month SOC as a Service $3,500/month 24/7 Continuous Monitoring $2,200/month SIEM Management $1,800/month EDR / XDR $1,100/month Incident Response Retainer $1,500/month Ransomware Response $25,000 BEC Response $8,500 Digital Forensics $12,000 Log Analysis & Review $6,000 Threat Hunting $4,500 Purple Team $18,000 Tabletop Exercise $6,500 Threat Intelligence $1,200/month Dark Web Monitoring $650/month Vulnerability Management $1,200/month Patch Management $950/month Email Security $850/month Endpoint Protection $900/month Network Security $1,400/month Zero Trust Implementation $15,000

Lory AI

4 services

Lory runs scoped engagements against your assets on her own, and a human reviews every finding before it reaches you. Billed by the credit — $1 buys 1 credit, and nothing starts that you have not funded.

Lory Recon $250/month Lory Operator $1,000/month Lory Continuous $2,500/month Lory Credits $1/credit

Not sure what you need? Build your own bundle

What You Get

Every engagement includes

Detailed Technical Report

Every vulnerability documented with severity rating, CVSS score, proof-of-concept exploit, reproduction steps, and remediation guidance. Formatted for developers and auditors.

Executive Summary

A non-technical overview of your security posture, risk level, and key findings for leadership, board members, and compliance officers.

Client Portal Access

Real-time findings as we test. Track remediation progress, download reports, communicate with your tester, and manage your security program from one dashboard.

Free Retesting

After you fix the findings, we retest and update your report with pass/fail status. Your auditors get a clean report showing the issues were resolved.

Dedicated Project Manager

One person handles your engagement from start to finish. They answer your questions, keep you updated, and make sure the engagement runs smoothly.

Remediation Support

Stuck on a fix? Our engineers provide guidance on how to remediate findings. For hands-on help, add our remediation service and we fix it with you.

How It Works

From first call to final report in under two weeks

Free Scoping Call

30 minutes. Tell us what you need tested. We ask about your tech stack, compliance requirements, and timeline. No obligation.

Proposal in 48hrs

You get a clear statement of work with scope, timeline, and fixed pricing. No hourly billing surprises. Sign and we schedule your test.

We Test Manually

Our engineers attack your systems the way a real attacker would. You see findings in your portal as we go. Average engagement is 5-10 days.

Report + Retest

You get the full report within 48 hours of test completion. Fix the issues, we retest for free, and you get a clean report for your auditors.

Compliance

Reports your auditors will accept

Every report maps findings to the compliance framework you need. No extra formatting work on your end.

SOC 2 ISO 27001 PCI DSS HIPAA CMMC All Frameworks

Get a free quote in 24 hours

Tell us what you need tested. We will respond with a clear scope, timeline, and fixed price within one business day. No sales pitch, no obligation.

Book a Scoping Call View Packages Build Your Bundle

Everything we do,and what it costs.