WEBSITE SECURITY / AUTHORIZED ASSESSMENT
A scan is useful when your team can understand and act on its findings. Our website vulnerability assessment turns an agreed set of checks into a prioritized report with evidence and remediation recommendations. Choose a website security audit of the public site, a web application security assessment with login, or an app and API review with one retest.
Security assessments from $390 USD
01 / Written authorization required
02 / Findings with evidence and priorities
03 / App and API retest in Premium
AI-generated visual concepts to show possible styles, not client projects. Select an image to enlarge it.
Basic scans one public website externally. Standard assesses one application with login and OWASP Top 10 checks. Premium includes the application's API, fixes guidance and one retest of reported findings after your team has corrected them.
BASIC
An external scan of one website
$390 USD
2 days · 1 revision round
For applications with login
STANDARD
One web app with login and OWASP Top 10 checks
$790 USD
4 days · 1 revision round
PREMIUM
A web app and its API, with one retest
$1,490 USD
7 days · 2 revision rounds
Basic, Standard and Premium take 2, 4 and 7 days of agreed project work after authorization and access are complete. Revisions are one, one and two consolidated report-correction rounds. Premium's retest date depends on your team's fixes and is agreed at kickoff.
Multiple applications, a large API or testing restrictions? Send the target list and constraints before ordering so the assessment has a realistic boundary.01 / FINDINGS WITH CONTEXT
01
Targets, accounts, methods and the test window are agreed in writing, so the assessment stays within your authorization.
02
The report records evidence, affected locations and severity, distinguishing supported findings from unconfirmed tool output.
03
Recommendations guide your developers. Premium's single retest records the status of the reported findings after remediation.
A focused review of the externally visible site and its exposed configuration.
An agreed review of login, sessions and access controls using supplied test accounts.
A combined app and API assessment within a defined set of endpoints and roles.
Confirm ownership or authorization, exact targets, permitted methods, test accounts and a contact for the test window.
We assess the public site or authenticated application and API according to the selected package.
We document supporting evidence, flag uncertainty and order remediation recommendations by priority.
Your team receives the report. Premium includes one scheduled retest of reported issues after your team implements fixes.
01
Scope, methods, limitations and prioritized findings with supporting evidence.
02
Written next steps for your team, with more detailed fixes guidance for the app and API in Premium.
03
The outcome of one retest of the reported findings after your developers' corrections, with unresolved items identified.
This is a point-in-time vulnerability assessment, not a guarantee of security, a certification or an unrestricted penetration test. We exclude destructive tests, denial of service and unauthorized third-party systems. Your developers implement fixes; ongoing monitoring is not included. The pictured organizations and findings are illustrative fictional examples.
Before you order
Basic is $390 USD for one external website scan and report. Standard is $790 for a web app with login and OWASP Top 10 checks. Premium is $1,490 for an app and API, fixes guidance and one retest.
Written authorization covering the exact systems and permitted checks. You must own the targets or have authority to approve testing. Any third-party permission needed must be in place before testing starts.
The defined project work takes 2, 4 or 7 days, depending on the package, once authorization and access are complete. Premium's retest is scheduled around your developers' remediation; their work can extend elapsed time.
Basic needs no login. For Standard and Premium, we agree test accounts for the relevant roles. Provide only the access required for the approved checks, preferably with test data.
No. The report describes what was assessed and found at that time. It cannot prove that every vulnerability has been found or that the website will remain secure after changes.
No. These packages provide assessment and recommendations. Premium includes fixes guidance and one retest after your team implements the corrections. Code changes require a separate scope.
The offer is a bounded vulnerability assessment. If a contract requires a penetration test, a named certification or particular testing methods, send the requirements before ordering so suitability can be checked.