Book a Service | Fortuna Security

1 Choose Your Scope — one per checkout, extend or add scope any time

Service Agreement — Choose Your Scope

A one-time fee opens the contract. Price and contract length both scale with how much ground the engagement covers.

Narrow Scope One Application or One Defined Target · 3 Months

Covers a single application, endpoint, or narrowly defined target
3-month contract term
Authorized methods matched to scope: vulnerability scanning, web application testing, configuration review
Bi-weekly audit findings, with any real vulnerability escalated the moment it's confirmed
Deliverables: Vulnerability Assessment Report & Technical Findings Report

$50 opens a 3-month contract Standard Scope A Typical Website & Connected Services · 6 Months

Covers a typical website plus its directly connected services
6-month contract term — double the runway of Narrow Scope
Authorized methods: web application testing, external penetration testing, password testing, configuration review
Bi-weekly audit findings for the full six months
Deliverables: Vulnerability Assessment Report, Technical Findings Report & Executive Summary

$100 opens a 6-month contract Broad Scope Multiple Systems or a Full Environment · 6 Months

Covers multiple applications, systems, or a full environment
6-month contract term across every system in scope
Authorized methods: network vulnerability scanning, web application testing, internal & external penetration testing, wireless testing, password testing, configuration review
Bi-weekly audit findings across the full environment
Deliverables: Vulnerability Assessment Report, Technical Findings Report & Executive Summary, scoped per system

$200 opens a 6-month contract, multi-system

Included With Every Service Agreement

A written scope signed before any testing begins — nothing outside it gets touched
Any finding is reported through a secure channel within 12 hours of discovery
Sensitive data encountered during testing is encrypted, shared only with your named contacts, and destroyed once the engagement closes
A named emergency contact can stop testing immediately, for any reason, with a full written status report within 24 hours
Testing stays within the CFAA and applicable state law, for every scope tier

Confirmed Findings, Billed Separately

Not a checkout line item — once we confirm a vulnerability, we invoice for it directly, priced by severity, with its CWE, CVSS score, Abstraction Hierarchy placement, remediation strategy, and retest included.

Low	$50
Medium	$100
High	$500
Critical / Zero-Day	$1,000

Want More Than Bounty Hunting?

The Defensive Stack SIEM, IDS/IPS, EDR & 24/7 Monitoring — Ongoing Partnership

For clients who want an ongoing managed relationship rather than a fixed-scope hunt. Scoped and priced by consultation, not a fixed checkout line item.

Book a Scoping Call →

2 Confirm & Pay

You'll be redirected to Stripe's secure checkout to complete payment. Card details never touch Fortuna Security's servers. A receipt arrives by email, and we'll follow up within one business day to schedule.

Your Order

⚖

Select a line item to get started