Services and pricing.
Every package includes the scoping call, execution, a written report, and a remediation walkthrough. Scope beyond a package adds days at €1,200, for everyone. Prices in EUR, excluding VAT.
Start here
Attack Surface Review
Two days on your external perimeter, up to three root domains. What is exposed, outdated, misconfigured, or leaked. Validation only, no exploitation. The output is the prioritized list you would otherwise get from the first two days of a full external pentest.
Priced so a CTO can sign it without a procurement cycle. If you contract a full engagement within 90 days, the full amount is credited against it.
Book a free scoping callPublished prices, published terms.
What is published is what the scope described costs. Bundle and annual-prepay discounts are listed below, so nobody has to ask for them.
| Engagement | Scope | Days | Price |
|---|---|---|---|
| Attack Surface Review | External perimeter, up to 3 root domains | 2 | €1,900 |
| Web Application Pentest — S | 1 role, ~30 endpoints | 5 | €5,900 |
| Web Application Pentest — M | 2–3 roles, ~80 endpoints | 7 | €7,900 |
| Web Application Pentest — L | Larger or multi-app scope | — | after scoping |
| External Network Pentest | Up to 50 live hosts | 5 | €5,900 |
| Internal Network Pentest | Assumed breach, internal network | — | after scoping |
| Active Directory Assessment — Single domain | One AD domain | 7 | €8,900 |
| Active Directory Assessment — Multi-domain | Multi-domain / forest | 10 | €11,900 |
| Mobile Application Pentest | iOS or Android, one app | — | after scoping |
| Red Team Operations | Objective-based, 2–4 weeks | — | after scoping |
| Cloud Security Assessment | AWS / Azure / GCP, 5–10 days | — | after scoping |
| Out-of-window retest | Re-validation of findings after the free 30-day window | 1–2 | €1,900 |
| Additional day / scope extension | Same operator, same engagement | 1 | €1,200 |
- Payment
- 50% at signature, 50% on delivery for new clients. NET-30 for established clients. EUR, USD, or stablecoin.
- Bundles
- 10% off two services contracted in the same quarter, 15% off three. Published, so nobody has to ask.
- Retest
- High and Critical findings re-verified free within 30 days of delivery, on every assessment.
- VAT
- Invoiced by REDOPS Security Ltd., Cyprus. EU B2B clients: reverse charge, no VAT added. Outside the EU: no VAT.
Web Application Pentest
Remote
Manual testing of web applications and APIs. Authentication and session flows, business logic, authorization (IDOR/BOLA), race conditions, server-side injection chains. REST, GraphQL, and WebSocket.
Covers
- OWASP Top 10 and ASVS
- Authentication, session, and authorization
- Business logic and chained exploitation
You get
- Findings with CVSS scores and reproduction steps
- Remediation written for your stack
- Free retest within 30 days
External Network Pentest
Remote
Your internet-facing infrastructure from an external attacker’s position. OSINT-driven recon, active enumeration, exploit validation, and post-exploitation where scope allows.
Covers
- Subdomain and service enumeration
- CVE validation and exploitation
- Cloud asset and credential exposure
You get
- Attack surface inventory
- Verified findings and exposed credentials
- Free retest within 30 days
Internal Network Pentest
Remote or on-site
Assumed-breach testing of your internal network, from a standard user or an unprivileged host toward Domain Admin and Tier-0. Maps the path a real intruder takes once the perimeter is behind them.
Covers
- Active Directory, ADCS, and credential access
- Segmentation and lateral movement
- Privilege escalation to Tier-0
You get
- Attack path documentation with BloodHound graphs
- Prioritized remediation and detection hints
- Free retest within 30 days
Active Directory Assessment
Remote or on-site
Internal assessment from an assumed foothold, with the goal of Domain Admin and Tier-0 assets. Maps the paths a real attacker would take, not a list of theoretical weaknesses.
Covers
- Kerberos attacks, roasting, delegation abuse
- ACL and GPO abuse chains
- Relay attacks, lateral movement, privilege escalation
You get
- Attack path documentation with BloodHound graphs
- Prioritized remediation roadmap and detection hints
- Free retest within 30 days
Mobile Application Pentest
Remote
iOS and Android application testing, static and dynamic, covering the app on the device and the backend API it trusts. Aligned to OWASP MASVS.
Covers
- Local storage, keychain, and platform misuse
- Certificate pinning and transport security
- The backend API and its authorization
You get
- Findings with CVSS scores and reproduction steps
- Static and dynamic results, app and API
- Free retest within 30 days
Red Team Operations
Remote or on-site, 2–4 weeks
Objective-based adversary simulation. Initial access by phishing or external exploitation, EDR evasion with custom tooling, lateral movement, and objective-driven exfiltration. Tests prevention and detection together.
Covers
- Phishing, custom C2, custom loaders
- EDR evasion against Sophos, CrowdStrike, SentinelOne
- Persistence, lateral movement, exfiltration
You get
- Full operation narrative mapped to MITRE ATT&CK
- IOCs and detection gap analysis for your SOC
- Executive briefing and technical debrief
Cloud Security Assessment
Remote, 5–10 days
Offensive assessment of AWS, Azure, and GCP environments. Privilege escalation through IAM, exposed storage and serverless surface, and lateral paths between cloud and on-premises.
Covers
- IAM misconfiguration and escalation chains
- Storage, serverless, and Kubernetes exposure
- Hybrid cloud-to-on-prem paths
You get
- Cloud attack surface map and IAM privilege graph
- Exploitable misconfigurations with a hardening playbook
- Free retest within 30 days
Continuous offensive testing.
For teams shipping every week. The perimeter changes faster than an annual pentest can see, so the operator keeps watching it.
Watch
- Continuous monitoring of your external attack surface
- Alerts on new exposed hosts, services and certificates
- Monthly written report
- Direct channel to the operator
Watch + Verify
- Everything in Watch
- One retest day per quarter to verify remediation
- Priority scheduling for new engagements
12-month commitment, billed monthly. 10% off for annual prepayment. Excluding VAT.
How an engagement runs.
- 01
Scoping call
Thirty minutes to understand objectives, scope, and constraints. Mutual NDA in place before any technical detail.
- 02
Proposal and contract
Fixed-price proposal matching the published package. Standard MSA and SOW. 50% at signature, 50% on delivery.
- 03
Execution
Active testing with same-day notice of critical findings and a direct channel to the operator throughout.
- 04
Delivery
Written report and a walkthrough call with your technical team. Free retest of High and Critical findings within 30 days.
Something not on this page? Mobile, source code review, phishing simulation, IoT, M&A due diligence, and vCISO advisory are scoped in days at €1,200 a day. Bring it to the call.
Every engagement starts with the same call.
Thirty minutes, NDA first, written proposal within 48 hours if you want one.
Book a free scoping call