Packages and prices
Three fixed scopes. Every price includes testing, the full report in your client portal and a retest of the findings.
Booking now · next testing window starts Mon, Nov 9
EUR, excl. VAT
Not sure which package fits?
A 45-minute call with one of our testers. We go through your attack surface, recommend the right package and answer your questions about how we test.
The €500 is credited in full when you book a package within 30 days.
Every package, side by side
| Feature | Scout€5,000 | Siege€10,000 | Fortress€25,000 |
|---|---|---|---|
| External attack-surface test | Up to 1 domain and 16 public IPs | Up to 1 domain and 16 public IPs | Up to 1 domain and 16 public IPs |
| Web-application test | Light test, one application | Full OWASP test | Full OWASP test |
| Internal network test (remote appliance) | Not included | Included | Included |
| Microsoft 365 or Google Workspace review | Not included | Included | Included |
| Phishing and social-engineering campaign | Not included | Not included | Included |
| Cloud configuration audit (AWS, Azure, GCP) | Not included | Not included | Included |
| Assumed-breach ransomware drill | Not included | Not included | Included |
| Full report in the client portal | Within 10 business days | Dates agreed in advance | Dates agreed in advance |
| Retest | One free retest of Critical and High | Within 60 days | Within 60 days |
| Quarterly external retests, 12 months | Not included | Not included | Included |
| Debrief call | Not included | 1 hour | 1 hour |
| Board-ready summary, NIS2 and ISO 27001 mapping | Not included | Not included | Included |
What happens after you pay
- 1
Pay
Pay online through Stripe. Your order then appears in your private client portal.
- 2
Sign
Confirm the scope, pick the testing window and sign the authorization in the portal.
- 3
Test
We test only what you authorized, inside the window. Critical findings reach you the same day.
- 4
Report
The full report appears in your portal. Fix the findings, then we retest them.
About the price
Is VAT included?
No. All prices are in euros and exclude VAT. At checkout you enter your billing address and, if your company has one, its VAT number.
When do we pay?
In advance, online through Stripe. The agreement starts when payment is confirmed. Testing starts once you have signed the testing authorization.
Are there extra costs?
No. There is no hourly billing. The price covers the testing, the full report in your client portal and the retest included in your package.
What does the retest cover?
Scout includes one free retest of Critical and High findings. Siege and Fortress include a retest within 60 days. Fortress also adds quarterly external retests for 12 months.
What if our scope is larger?
Write to us with what you want tested: more applications, more IP addresses or another kind of test. We will tell you which package fits, or what a custom scope would look like.
Can we reschedule or cancel?
You can move the testing window free of charge up to five business days before it starts. If you cancel before testing begins, we refund the price minus costs already made. The terms of service have the details.
Find out before they do
Book a package online, or write to us if you are unsure which scope fits.