Penetration testing services

Every test is manual and tailored to your system. You get a fixed price, an audit-ready report and a free retest.

Prefer to talk first? Book a call

Web application pentest

SaaS platforms, portals, shops and internal web apps, tested by hand against OWASP WSTG.

from €2,900 · 3 test days
API pentest

REST and GraphQL APIs behind your apps, partners and integrations, tested against the OWASP API Top 10.

from €2,400 · 3 test days
iOS app pentest

iPhone and iPad apps and the API behind them, tested by hand against OWASP MASVS.

from €2,900 · 3 test days
Android app pentest

Android apps and the API behind them, tested by hand against OWASP MASVS.

from €2,900 · 3 test days
Desktop app pentest

Windows, macOS and Linux applications, thick clients and their servers, tested by hand.

from €3,800 · 4 test days
AI & LLM pentest

Chatbots, RAG assistants, AI agents and LLM features in your product, tested against the OWASP LLM Top 10.

from €2,900 · 3 test days
IoT & hardware pentest

Connected products end to end. Device, electronics, firmware, app and cloud, tested together.

from €4,700 · 5 test days
Cloud pentest

AWS, Azure and Google Cloud accounts, IAM and workloads, checked against CIS and tested by hand.

from €3,300 · 4 test days
External network pentest

Public IPs, domains, VPN, mail and remote access, tested from an attacker's position on the internet.

from €1,900 · 2 test days
Internal network pentest

Office and server networks, segmentation and critical systems, tested from an attacker's position inside.

from €3,800 · 4 test days
Active Directory pentest

On-premises Active Directory and hybrid Entra ID, checked for the paths from a normal user to domain admin.

from €3,400 · 4 test days
Red teaming & assumed breach

Multi-week, objective-based attack simulation that tests your detection and response, within agreed rules.

from €9,500 · 10 test days
Secure code review

Manual review of your source code for security flaws, against OWASP ASVS, with fixes per line.

from €2,900 · 3 test days
Not sure which test you need? Book a scoping call

Monthly: Continuous pentesting

One manual test day every month, for example for your web app all year round. Unlike the monthly AI-assisted pentest, which is an AI-assisted run every 2 weeks.

Continuous pentesting One manual test day every month, used for your releases. Fixed monthly price, cancel monthly. €590 per month · 1 test day per month · cancel monthly

Not a pentest: vulnerability assessment

An automated scan of up to 32 external IP addresses, checked by hand. Lighter than a pentest, and we tell you when you need one.

Vulnerability assessment An automated scan of up to 32 external IP addresses, checked by hand. Not a pentest. €390 fixed price · up to 32 IP addresses

Separate option: AI-assisted pentest

All tests above are manual pentests. You choose the AI-assisted pentest specifically; it complements a manual pentest rather than replacing it.

AI-assisted pentest AI agents run the test, a senior tester steers it and verifies every finding. One-time or monthly. One-time €590 per target · monthly €390 per target

Also tested

More topics we test inside the core tests, or as an engagement of their own.

Inside a core test, no surcharge

No extra fee for the topic itself. If it needs more test days, the quote shows them upfront.

Engagement models

Priced separately from the core tests.

What should we test?

Pick one to start your request. You get your binding fixed price instantly, and the written offer (PDF) by email right after your request.

See my fixed price

Prefer to talk first? Book a call

Penetration testing services

Web application pentest

API pentest

iOS app pentest

Android app pentest

Desktop app pentest

AI & LLM pentest

IoT & hardware pentest

Cloud pentest

External network pentest

Internal network pentest

Active Directory pentest

Red teaming & assumed breach

Secure code review