Initial assessment of public endpoints
What an attacker can see and reach from the internet: your domains, mail, websites, remote access and cloud exposure.
$1,000 per assessment
View detailsDemo. This is a mockup. No payment is taken, no order is placed and no real data is shown.
After you purchase, we contact you within 1 hour, any time of day or night, to start onboarding.
Scanning of software codebase
Static analysis and secret detection across one codebase, reviewed by an engineer so you get findings, not noise.
Assessments and testing
What is included
- Static analysis of one repository (up to 500,000 lines)
- Detection of leaked keys, tokens and credentials
- Dependency check for known vulnerable libraries
- Engineer review to remove false positives
- A report with the fix for each finding
Delivery
Report within 3 business days of read-only access.
Good to know
Do you keep our code?
We work from read-only access you grant and remove it when the engagement ends. Nothing is retained after delivery of the report beyond the report itself.
Which languages are covered?
Most mainstream languages and frameworks. Tell us yours at checkout and we confirm before work starts.
Testing of any kind happens only inside a written scope and rules of engagement that you sign before work begins. See all services.
More in assessments and testing
Pentesting local networks
We ship a test kit to your office, you plug it in, and we test your internal network from the inside, with written authorization.
$2,500 per site
View detailsWeb application penetration test
A hands-on test of one web application, including login, roles and business logic, not only an automated scan.
$3,500 per application
View details