Offensive Security with Purpose

Choose your engagement

Rigorous. Fairly priced.

Flat fee

OWASP Top 10 Audit

The thorough option: a hands-on pass against every category of the Top 10, at a price that is a fraction of the usual.

$500one payment

All ten OWASP categories tested by hand, with tools in support
Every confirmed issue documented with CWE, CVSS & evidence
Fix guidance for your developers, plus a retest
Executive summary you can hand to leadership

Pay by results

Bug Bounty Hunt

Skilled hunters on your scope for a low entry fee. Findings are billed only once we have proven them.

$100opening fee + months

Low findings: free. Medium: free if not relevant to your business
Otherwise Medium up to $75, High up to $100, Critical up to $200
Findings billed only after we confirm them
$50 opening fee, then $50 per month of hunting

How long should we hunt?

Affordable by design, effective by craft

We keep rates fair because good security should not be a luxury. We never cut corners to get there. Each confirmed finding comes with its CWE, CVSS score, evidence, fix steps and a retest, and is invoiced by severity.

LowFreealways

Medium$0 – $75free if not relevant

Highup to $100per finding

Criticalup to $200per finding

Estimate your worst case (bounty)

Medium, relevant to you0

High0

Critical0

Fee + findings, at most $200 3 months + 0 findings

Skill, shown not claimed

From real engagements

Scanners find the obvious. Our testers chain small weaknesses into real impact and prove each one. A few things we have found and reported:

Account takeover chain

One API call, GET /auth/me, exposed an email verification token, a password reset token and a live MFA code.

Paywall bypass, disproven claim

Paid features reachable without a subscription. Server-side enforcement was claimed, then disproven. CWE-862, Missing Authorization.

MFA bypass & code leak

MFA defeated, and a live one-time code returned as plaintext. Found by testing the flow by hand.

Also reported

XSS, client-side enforcement of server-side security (CWE-602), sensitive data exposure and missing authorization.

See the full track record →

What we put in writing

Every engagement

Scope signed before we touch anything

Nothing outside the written scope is ever tested.

Findings reach you within 12 hours

Reported through a secure channel the moment we confirm them.

Your data is encrypted, then destroyed

Shared only with your named contacts and deleted when the engagement closes.

You hold the kill switch

A named emergency contact can halt testing instantly, with a full status report in 24 hours.

Inside the law, every time

Testing stays within the CFAA and applicable state law.

Fair questions

What if you find nothing?

On a bounty you pay only the opening fee and monthly fee, so you never pay for findings that do not exist. With the audit, you still get a documented, category-by-category result you can show customers or auditors.

Is it cheap because it is less thorough?

No. Our rates are low because we want security to be within reach, not because we test less. Every engagement is manual-first, senior-led and fully documented. Low findings are free because they rarely change your risk alone, and we charge only for what puts the business at stake.

Who decides whether a Medium is "relevant to my business"?

We explain our reasoning in the report, with the CWE and CVSS data behind it. If a Medium touches your users, data or revenue, it is billable at up to $75. If it does not, it is free.

Audit or bounty, which should I pick?

Choose the audit for a fixed price and a complete OWASP Top 10 review. Choose the bounty if you want a lower entry cost and to pay in step with what we prove.

Can I pay for more months later?

Yes. Extend any time for $50 per month, or add scope with a quick message to your analyst.

Need ongoing defense, not just a hunt?

SIEM, IDS/IPS, EDR and 24/7 monitoring are scoped through a short conversation rather than a checkout line.

Book a scoping call →