When the system is more than a web app.
Some systems do not fit one surface on a schedule. A scoped engagement is a plan for the web app and its API, plus fixed-price modules for the rest, in one written offer before anything runs.
- Modules from
- €2,500
- Offer after design docs
- 5 business days
- Price per line
- Fixed
- Sold with
- A plan
Each module is one fixed line in the offer. If design documents need study before testing, the offer shows that as one setup line, priced the same way. There are no day rates and no credits, and the plans never carry a setup fee.
Modules
- Protocol harness
- For a protocol your product speaks: a peer, sync or device network. We join it as a hostile participant and test what it can learn, change or replay.
- Desktop client review
- A manual review of a desktop client build, from what it stores on the device to what it accepts from the network.
- Role matrix
- Approval, recovery and admin flows attacked from every role and tenant you name, set up with you before testing.
- Estate or MSP
- More than the 6 surfaces Business covers, or delivery under an MSP's own brand.
In every offer
- What we test and what we do not, line by line
- A fixed price for each line, and the timeline
- A mutual NDA before design documents change hands, if you need one
- Scope and written authorisation signed by both sides before any test
Where we stop
- Cryptographic design review of the key model, threshold or recovery scheme. We say so, and help you find a specialist
- Internal networks, mobile apps, physical access and social engineering
- A one-off audit on its own: modules sell with a plan
- Day rates, credits, or a bill that grows with the hours
How it runs
- 01Overview
Send a short overview you can share without an NDA: what the system is, which parts worry you, and the date you need answers by.
- 02Call
We walk through the architecture with you. A mutual NDA follows if you need one, then the design documents.
- 03Offer
Within 5 business days of the design documents: every line with its fixed price, and the timeline.
- 04Signature
Both sides sign the scope and the written authorisation. Nothing runs before that.
- 05Testing
The plan's pentest starts once the authorisation is signed and your test environment is reachable, with no booking queue. Each module starts on the date in the offer. Findings reach you as they are validated.