Initial assessment of public endpoints
What an attacker can see and reach from the internet: your domains, mail, websites, remote access and cloud exposure.
$1,000 per assessment
View detailsDemo. This is a mockup. No payment is taken, no order is placed and no real data is shown.
After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.
API penetration test
Authorization flaws, data exposure and abuse paths in your REST or GraphQL API.
Assessments and testing
What is included
- Testing of one API with its documentation or schema
- Object-level and function-level authorization checks
- Rate limiting, mass assignment and data exposure checks
- A report with requests that reproduce each finding
- One retest within 60 days
Delivery
Report within 8 business days of kickoff.
Good to know
Do you need our API documentation?
It helps and shortens the test. If there is none, we build a schema from traffic during the first day.
Testing of any kind happens only inside a written scope and rules of engagement that you sign before work begins. See all services.
More in assessments and testing
Scanning of software codebase
Static analysis and secret detection across one codebase, reviewed by an engineer so you get findings, not noise.
$500 per codebase
View detailsPentesting local networks
We ship a test kit to your office, you plug it in, and we test your internal network from the inside, with written authorization.
$2,500 per site
View details