Penetration Testing (VAPT)
We test your websites, apps, networks and cloud set-up the way an attacker would, then tell you in plain English what to fix first.
Who it is for
- Businesses launching or changing a web app, API or mobile app
- Teams asked by customers or auditors for an independent security test
- Companies that have never had their systems tested, or not for a year or more
What you get
Tested and confirmed findings
Each issue is checked by hand, so you are not handed a list of scanner noise.
Risk ratings you can act on
Findings are ranked by how much they matter to your business, with the evidence behind each.
Fix guidance
Clear steps your developers or IT team can follow.
Two views of the report
A short summary for managers and a technical section for the people fixing things.
A re-check of the fixes
We confirm the important issues are closed (scope agreed in the quote).
How an engagement runs
Free consultation
A short call to understand what you run, what worries you and any deadlines.
Scope and quote
We agree what is in and out of scope, the dates and the cost in writing before work starts.
Assessment
We test the agreed systems, using the OWASP Top 10 and similar references as a checklist. We tell you straight away if we find something serious.
Report and debrief
You receive the written report and we walk your team through it.
Fix and re-check
You fix what matters most. We can check the fixes and update the report.
Typical duration:To be confirmed: typical duration
Sample deliverable
A redacted excerpt of a penetration test report will appear here. To be confirmed: approved redacted sample.
Packages
Every engagement is quoted from its scope. The quote is fixed in writing before work starts.
Standard
A web app and its API, or an external network plus one application.
Contact us for a quote
Ask about this packageComprehensive
Several systems, including cloud and mobile, with a re-check included.
Contact us for a quote
Ask about this packageFrequently asked questions
How long does a penetration test take?
It depends on the size of what we are looking at. We give you dates in the written quote before you commit.
How much does it cost?
Contact us for a quote. We price each engagement from its scope, and the quote is fixed in writing before work starts.
Will you disrupt our systems or staff?
We agree the rules of the engagement with you first, including when testing may happen and what must not be touched.
What is the difference between a vulnerability assessment and a penetration test?
An assessment finds and lists likely weaknesses. A penetration test goes further and tries to use them, to show what an attacker could really reach.
Ready to talk?
Book a free consultation. We will ask about your systems, answer your questions and, if it suits you, send a written quote.