For public-facing, non-sensitive businesses
One explicitly agreed website or public API target. Subdomains, related applications and other assets are not automatically included.
Who we serve
- SaaS and software services
- E-commerce and retail
- Logistics, manufacturing and B2B services
- Media and other non-sensitive industries
Not currently covered
- Government, banking, finance, securities and payment cores
- Healthcare and critical infrastructure
- Internal systems accessible only through LAN, VPN or private links
- Unauthorized, destructive or load testing
- No testing of logged-in features, multiple account roles, business workflows or complex business logic.
Standard public security check · US$120
One explicitly agreed website or public API target. Subdomains, related applications and other assets are not automatically included.
Unauthenticated public exposure, basic security configuration and verifiable common security risks. The specific checks are confirmed before ordering.
No testing of logged-in features, multiple account roles, business workflows or complex business logic.
For an inquiry, provide your company, work email, target and requirements. Ownership proof may follow; authorization must be verified before testing.
A PDF in an agreed language, covering scope, summary, evidence, impact, remediation and exclusions, delivered to your designated email.
Remediation retesting is not included in the base price. Scope, timing, number of rounds and fees are agreed separately.
Multiple targets, additional assets or retesting require separate scope and fee confirmation before work begins.
An engineer-reviewed report is delivered within two business days after ownership verification, authorization, scope, necessary materials and payment are confirmed.
Cancellation, postponement and refund conditions are explained before order confirmation and payment, and recorded in the mutually agreed order terms.