Engagements

How We Engage

From a single penetration test to testing every month, each package is scoped to your systems and priced on what the work requires.

Packages

Six ways to engage.

Start with one test, or build a standing program. Every package ends with evidence you can act on.

01 · One-time

One-Time Penetration Test

A single, scoped test of one system, application or network. Best for a new product, a major release or a first assessment.

  • Defined scope and rules of engagement
  • Full technical report with evidence
  • Risk and impact ratings
  • Limited Remediation guidance
  • Limited Findings walkthrough
02 · One-time

Test & Harden

A penetration test followed by defensive work to close what we find. Best when you want the weaknesses fixed, not just documented.

  • Everything in the One-Time Test
  • Hardening of the affected systems
  • Configuration and control improvements
  • Fix proof against original findings
  • Closure report
03 · 4 tests a year

Quarterly Assurance

One test each quarter, keeping pace with how your systems change. Best for products with regular releases.

  • Four scoped tests per year
  • Scope adjusted every quarter
  • Findings tracked across quarters
  • Fix proof between tests
  • Quaterly summary reports
  • Emergency Incident Response
  • Specifications are agreed on contract
04 · 12 tests a year

Continuous Testing

A monthly testing cycle for organizations that ship and change constantly. Weaknesses are found close to when they appear.

  • Twelve tests per year
  • Rolling scope across your systems
  • Priority findings reported as found
  • Fix proof every cycle
  • Trend reporting over time
  • Emergency Incident Response
  • Specifications are agreed on contract
05 · 12 tests a year

Continuous Test & Defend

Monthly testing paired with ongoing defensive engineering. The full cycle: attack, fix, verify, repeat.

  • Everything in Continuous Testing
  • Hardening after every cycle
  • Defensive controls reviewed and maintained
  • Quarterly and annual reporting
  • Emergency Incident Response
  • Specifications are agreed on contract
06 · Tailored

Custom Engagement

For environments or objectives that do not fit a package.

  • Custom scope
  • Specialized technical requirements
  • Agreed rules of engagement
  • Custom reporting requirements
  • Specifications are agreed on contract

Add-ons

Extend any package.

Available alongside any package where it is not already included.

Fix Proof

Prooving remediated findings to confirm they are closed.

Executive Briefing

A non-technical summary of risk and outcomes for leadership.

Pre-Release Test

An out-of-cycle test ahead of a major launch or release.

Additional Scope

Extra systems, environments or applications added to any package.

Pricing

Defined around the work.

There is no fixed rate card. Pricing follows the size and complexity of the target, the testing depth and our evaluation. Tell us what you need tested and we will decide.

Next

Have a system worth testing?

Discuss an Engagement