Pick your first move and start this week. Six engagements, one bundle, every price on the page. Each one runs on a written scope letter, and you’re invoiced only after the report is in your hands.
Pay by ACH, check, or card once the prioritized remediation report is delivered. Every engagement includes a live debrief and a 30-day retest of what you fix.
We probe every internet-facing door you own, the way a patient stranger with a laptop would. Open ports, forgotten subdomains, an exposed admin panel from the last IT vendor.
Customer logins, file uploads, booking forms, the portal your best client uses on Fridays. We test how it handles a user who doesn’t play nice.
The best first step if you’re not sure where to begin. We stage a believable campaign against your team, then show you who clicked, who reported, and how fast.
We read your response plan like a stranger at 2am would. Where does it say who decides? Where are the phone numbers? Then we hand back a rewritten one-page call sheet.
Three hours, the people who’d really answer the phone, and one invented bad day. You’ll find out in a conference room what you’d otherwise find out in a crisis.
A backup you’ve never restored is a hope, not a backup. We confirm yours actually comes back, who can reach it, and how long “back to normal” really takes.
Larger networks, multiple sites, or an application with more than one environment: ask for a written quote on the scoping call. Same fixed-price rules apply.
Go all in. We attack the perimeter, test the people, rewrite the plan, and rehearse the bad day, in one connected engagement with one debrief and one retest.
Bought separately: $10,825. You keep $2,185.
Start The Full Circuit“Somebody on my team will click something.”
Start with the $2,175 phishing assessment. It’s the smallest engagement we run and the one that teaches the most per dollar.
Test My Team →“Our website takes bookings and card details.”
Book the web app and portal test from $5,420. Your customers’ data lives behind that login, so that’s where we dig first.
Scope My App →“If we got hit tomorrow, nobody would know what to do.”
Begin with the $1,840 tabletop rehearsal. One afternoon, one invented crisis, and a list of decisions you can make today.
Schedule The Drill →Every engagement ends with something you can use on Monday morning, not a binder for a shelf.
Get Your Scope Letter| Offense Tests A1–A3 | A short, ranked findings report: the issue, the proof, how an attacker would use it, and the smallest fix. A live debrief with whoever fixes things on your side. A retest of your fixes within 30 days. |
|---|---|
| Defense Reviews B1–B3 | A marked-up gap list, a rewritten one-page call sheet, a decisions-to-make-now list from your drill, and measured recovery times for your backups. |
| The call | Anything critical gets a phone call to your named contact within 48 hours. We call you; you never chase us. |
| The paper | A signed scope letter before work starts, a short written confirmation of what’s closed after retest, and one invoice after delivery. |
That’s our hour, not yours. The price on the scope letter is the price on the invoice. If you add systems mid-test, we agree on the change in writing first.
Because you should hold the work before you pay for it. We invoice when the prioritized remediation report is delivered. Pay by ACH, check, or card.
Yes. Most clients do. The $2,175 phishing assessment and the $1,840 tabletop rehearsal are the two easiest places to begin, and everything else can be added later under the same rules.
Ask for a written quote on the scoping call. We’ll tell you what a larger network, a second site, or a second application changes, and the new number goes in the scope letter before we start.
When it helps. Tabletops and debriefs are often best in person, and we’re based on Light Horse Court in Marlton, NJ. Most technical testing runs remotely from our office.
Call, write, or send two lines about what you want tested. We’ll reply by the next business day with a time for a twenty-minute scoping call.