Pricing
Fixed prices, in public.
No "contact sales", no hidden tiers. Buy a launch package now and book your kickoff, or get a fixed quote for anything custom within 24 hours. Prices exclude 18% GST; global clients are billed in USD at checkout.
- — External attack surface, one domain
- — Top web risks: TLS, headers, exposures
- — Short, action-focused report
- — One retest within 30 days
- — One web app (up to 25 pages) + its API
- — OWASP WSTG & API Top 10 coverage
- — Authorisation tested across every role
- — Retest + attestation letter
- — Web + API + cloud, one engagement
- — Mapped to SOC 2, ISO 27001, DPDP
- — Two retests within 60 days
- — Attestation letter + exec readout
Full catalogue
Every service, with a starting price.
The final price comes from a short scoping form. Larger or combined scopes are quoted custom.
| Service | India | Global | Delivery |
|---|---|---|---|
| Web app pentest (up to ~50 pages/roles) | ₹60k–1.2L | $3.5k–7k | 5–8 days |
| API pentest | ₹50k–1L | $3k–6k | 4–6 days |
| Mobile app (per platform) | ₹70k–1.3L | $4k–8k | 5–8 days |
| External network + attack surface | ₹30k–70k | $2k–4k | 2–4 days |
| Cloud / M365 configuration review | ₹50k–1.2L | $3k–7k | 3–5 days |
| SaaS bundle (web + API + cloud) | ₹1.8–3.5L | $9k–18k | 2–3 weeks |
| Security Retainer | ₹25k–60k/mo | $1.5k–4k/mo | Monthly |
| Compliance readiness (SOC 2 / ISO 27001 / DPDP) | ₹75k–2L | $4k–12k | 2–4 weeks |
| Phishing simulation + staff training | ₹15k–50k | $1k–3k | 1–2 weeks |
| Consumer: personal security checkup | ₹999–1,999 | — | 1 hr call |
| Consumer: hacked-account recovery | ₹1,999–4,999 | — | 1–3 days |
| Consumer: family online-safety session | ₹2,499 | — | 90 min |
Pricing rules: a fixed quote from the scoping form, 50% upfront for new clients above ₹75k, one free retest, and 15–25% extra for rush or weekend testing.
How buying works
Mostly self-serve.
Choose or quote
Buy a package, or send the scope form for a fixed quote in 24 hours.
Pay securely
Razorpay checkout — UPI, Indian cards, or international cards.
Book your kickoff
Pick a slot on Cal.com. Testing starts after the signed authorisation.
Questions
Pricing FAQ
What's included in every engagement?+
A plain-English report with fixes, a readout call, and one free retest. The Startup Pentest and SaaS Assurance also include an attestation letter you can share with your own customers and auditors.
Do you really test, or just run a scanner?+
Every finding is reproduced and confirmed by a certified tester before it reaches you — you never get raw scanner output. AI only speeds up recon and report drafting.
What about GST and TDS?+
Indian invoices carry 18% GST. Services exported to foreign clients, paid in foreign currency, can be zero-rated under a Letter of Undertaking. Indian companies may deduct TDS under Section 194J.
Can international clients pay?+
Yes — Razorpay international cards, or a SWIFT wire. You're billed in USD at the prices shown.
When do I pay?+
Packages up to ₹75,000 are paid at booking. Larger jobs are 50% on signing the scope and 50% on the draft report. The final report is released after full payment.
Get a fixed quote in 24 hours.
Or run a free exposure snapshot — no login, no obligation.