Pricing Based On Your Scope.
Start with a defined assessment or discuss a recurring review schedule. We confirm the assets, testing depth, deliverables, retest window and fees in a written proposal. Specialist monitoring or response support needs a separate availability and scope discussion.
Security Assessment
- Agreed application or infrastructure scope
- Evidence-based technical findings
- Management summary and fix priorities
- Retest terms specified in the proposal
Recurring Security Reviews
- Reassessment of agreed assets
- Review after significant changes
- Remediation and retest follow-up
- Scheduled testing; monitoring agreed separately
Response & Advisory
- Choose monitoring, incident readiness or incident handling
- Scope and operating hours confirmed separately
- Escalation and response commitments agreed in writing
- Availability confirmed before work is accepted
Not sure which option fits? Tell us about your systems and priorities. We will discuss what needs testing, then confirm the scope, deliverables and fees in a written proposal before work begins.
Three Things We Clarify Before Pricing.
Environment and Scope
The applications, APIs, cloud resources or infrastructure in scope, their complexity and any testing restrictions.
Coverage and Frequency
Recurring reviews are assessments on an agreed schedule or after significant changes. They do not include continuous monitoring. Monitoring hours, alert handling and incident response commitments are agreed separately.
Deliverables and Timing
The reports, retesting, evidence and handover you need, along with target dates and dependencies on your team.