Fixed price
Penetration Testing
Web, mobile, network and cloud testing against recognised methodologies, with a re-test of critical findings.
What it is
Fixed price testing across web and mobile applications (OWASP Testing Guide), internal and external networks, and cloud configuration on AWS, Azure or GCP. Annual testing is required under ISO 27001, Essential Eight Maturity Level 3, PCI DSS and SOC 2.
How it runs
- 1 Scoping
- 2 Authenticated and unauthenticated testing across roles
- 3 Cloud configuration review
- 4 Reporting
- 5 Re-test of critical and high findings (scoped separately)
Talk to us about your engagement
A scoped proposal within one business day. No published rates; scoped by complexity.