SAFECHECK
Vulnerability assessment
The first phases of a pentest, done by hand: reconnaissance, vulnerability and risk analysis, with a remediation plan. No exploitation.
990 USD · 2–3 days
See SafeCheckDetect. Fix. Verify. Monitor.
From a first check to continuous pentesting.
Start wherever it makes sense for your company. We use automation and AI to cover more ground, and a person validates every finding before it reaches your report.
SAFEPENTEST ESSENTIALS / PRO
Web application pentest
Full pentest with controlled exploitation: business logic, authorization across users and tenants, authentication. Pro adds multi-tenancy, SSO and payments.
2,900 USD · from 5 days
See scope and pricingAPI PENTEST
API pentest
REST or GraphQL, up to 40 endpoints, focused on object-level authorization (BOLA/IDOR) and authentication flows.
3,400 USD · 5–6 days
See scope and pricingAEC PORTAL & CDE REVIEW
Engineering & construction
Project portal, CDE configuration and subcontractor access: who can see your drawings and models.
3,900 USD · 5 days
See AEC reviewPTAAS
Continuous pentesting
Periodic manual pentests, release testing and automated monitoring with human triage, in a monthly subscription.
690 USD/mo · 12-month contract
See plansSAFEPENTEST ADVERSARY
Attacker simulation
We start from a business objective and look for multiple ways to reach it, the way a real attacker would. Optional social engineering.
8,000+ USD · custom quote
Let's talkHow to choose
Which service do I need?
Each service answers a different question. Start with the one you're asking today.
| Your question | Your situation | Service |
|---|---|---|
| What does an attacker see from outside? | You want a first look, at no cost | Free exposure diagnostic |
| Where am I exposed? | You've never assessed your security, or you have obvious exposure | SafeCheck |
| What could an attacker actually achieve? | A customer, an auditor or a launch requires a formal pentest | SafePentest Essentials / Pro · API |
| Who can see my project's drawings? | You work with project portals, CDEs and subcontractors | AEC Portal & CDE Review |
| Am I still secure after every change? | Your SaaS application ships frequently | PTaaS |
| Could we withstand a targeted attack? | You want to test your defenses against an attacker with a concrete goal | SafePentest Adversary |
No test starts without a contract and written authorization. All prices in USD.