Who it applies to and the problem it addresses
The real value appears when scope is defined with business context and findings connect to owners, remediation, re-testing and evidence.
All pricing
Penetration Testing for companies tied to the roadmap: indicative range
$1,900–$10,000 USD
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Variables that affect cost
- • Number and type of assets: web, APIs, infrastructure, cloud or mobile.
- • Number of roles, authenticated flows and critical integrations.
- • Required depth and methodology according to the test objective.
- • Included environments, operational restrictions and authorized testing window.
- • Urgency, coordination and evidence or reporting requirements.
Typical scope
- • Scope intake before proposal.
- • Technical report and executive summary.
- • Prioritization by criticality, exploitability and context.
- • Remediation plan and follow-up evidence.
What is included
- • Defined scope and priority criteria.
- • Map of relevant gaps and risks.
- • Actionable recommendations.
- • Evidence or artifacts defined by service scope.
- • Executive summary for leadership.
- • Next steps connected to the Maturity Program.
What is not included
Certification, approval by an auditor, insurer or third party; total risk elimination; work outside the agreed scope.
Assumptions and process
- • We review context, external pressure, assets and available evidence.
- • We identify gaps, risks and pending decisions.
- • We deliver prioritized next steps connected to the roadmap.
Commercial terms
- Typical duration
- Approximately 3 weeks, depending on scope and information availability.
- Payment method
- International bank transfer
- Payment milestones
- One-time payment of 100% or, generally, 50% at the start and 50% after 30 days, as stated in the proposal.
- Taxes
- Prices exclude taxes. If a tax must be applied due to a legal obligation, it will be detailed in the proposal.
- Validity
- 10 days
- Re-test
- Includes 1 re-test within approximately 30 days, limited to findings and assets included in the original scope.
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Frequently asked questions
Is the published range the final price?
Indicative range. Final pricing depends on scope, company context, complexity, assets, available evidence and the terms agreed in the proposal.
Which currency and payment method apply?
Values are expressed in USD and payment is made by international bank transfer. One-time payment of 100% or, generally, 50% at the start and 50% after 30 days, as stated in the proposal.
Does the service guarantee certification, compliance or absence of risk?
No. The service is delivered under the agreed scope and does not guarantee certification, external approval, full compliance, risk elimination or absence of incidents.