CLEAR
pricing.

What’s always included.

• OSCP-certified engineer leading every engagement
• Manual testing first; tools to scale, never as a substitute
• Confirmed proof-of-concept for every reported finding — zero false positives
• Executive summary + full technical report + CSV/JSON finding export
• Free retest within 30 days
• Mutual NDA and signed Letter of Authorization

What changes the price?

Pricing depends on the size and complexity of the engagement. The main drivers are:

• Number of endpoints, hosts, or IAM principals in scope
• Authentication complexity (single role vs. multi-tenant)
• Compliance requirements (PCI-DSS, SOC 2, ISO 27001, FedRAMP)
• Stealth / red team requirements
• Reporting cadence (one-off, quarterly, continuous)

Every engagement starts with a free 30-minute scoping call. You receive a fixed-price proposal within 24 hours — no hourly billing surprises.

Compliance-led add-ons.

• PCI-DSS segmentation testing — from £3,200
• ISO 27001 readiness assessment — from £5,600
• SOC 2 Type II evidence package — from £4,400
• HIPAA Security Rule evaluation — from £4,000
• Threat intelligence (TIBER-EU) — quote on request

FAQs.

Do you offer discounts for repeat clients? Yes — ongoing retainers receive a 10–20% reduction. Multi-engagement annual programs are quoted at bulk rates.

Do you bill by the hour? No. Every engagement is fixed-price after scoping. You know the cost before the work begins.

What payment terms do you offer? Standard net 30. Larger engagements support split invoicing (40% on kickoff, 60% on report delivery).

Can I see a sample report? Yes — we share a redacted sample under NDA after the scoping call.