00.5
Pricing
Indicative starting points, so you can tell early whether this is the right budget conversation. Final pricing follows scoping.
Web Essentials
from €1,200
2-3 days
A single application. Unauthenticated plus one role, covering the OWASP Top 10 against roughly fifteen endpoints.
Web Complete
from €2,900
5-7 days
Authenticated testing across two or three roles with business logic covered per OWASP WSTG, against roughly forty endpoints.
Web plus API
from €4,900
8-12 days
A larger application together with its REST or GraphQL API, multi role, tested through both the interface and the API directly.
All figures in EUR, excluding VAT. Not currently VAT registered.
INCLUDED IN EVERY SCOPE
- Written report with CVSS 3.1 scored findings
- Executive summary and technical detail in one document
- Step by step remediation guidance
- Debrief call
- One retest with the report reissued
WHAT MOVES THE NUMBER
- How many user roles exist, and how differently they behave
- Whether an API is in scope alongside the interface
- Authenticated testing versus unauthenticated only
- The size of the endpoint surface
- How much business logic sits behind the application
Every figure above is a starting point, not a quote. The final number comes out of scoping, and scoping is a conversation, not a form.
External perimeter, API only and cloud configuration reviews are quoted on request.