One-time pentest
For a release, compliance milestone or high-risk application.
- Defined web, mobile, API or cloud scope
- Certified operator-led testing
- Live finding delivery
- Signed report and retest
Pricing
Pay for the testing motion you actually need.
Start with one critical scope or build an always-on offensive program. We price around assets, complexity and testing depth; not vague day rates.
Get a scoped quote →Scope builderEstimate ready
TargetCustomer web platform
Web app + public API · 4 user roles
01DepthAuthenticated deep-dive
Business logic · auth · injection · cloud paths
02DeliveryOperator-led PTaaS
Live findings · retest · signed report
24hEngagement models
Start focused. Scale when the risk demands it.
Every model includes verified evidence, remediation guidance and direct access to the people doing the work.
Continuous PTaaS
For teams shipping frequently across multiple assets.
- Reusable testing capacity
- Optrix autonomous coverage
- Operator verification
- On-demand retesting and reporting
Managed program
For broad attack surfaces and mature security teams.
- Managed bug bounty
- Vetted researcher network
- 24/7 triage and deduplication
- Program operations and analytics
Included by default
No add-on required for a useful result.
Operator-verified findings
No unreviewed scanner output or speculative issues passed to your team.
Engineering-ready evidence
PoC, CVSS, business impact and remediation guidance on each issue.
Retest and signed reporting
Validate the fix and close the engagement with evidence stakeholders can trust.
How pricing works
A clear quote starts with a clear attack surface.
Share the target
Tell us what changed, what matters and what the test needs to support.
Define the depth
We map assets, roles, integrations and the attack paths worth exploring.
Choose the model
Get a transparent recommendation, timeline and price tied to the work.
Get an exact quote