// Pricing

Priced by what you test.

Web application testing scoped by application size. Pick the cadence that fits: a one-off, a yearly compliance test, or a re-run subscription. Network testing is on the roadmap.

// Estimate

Price it yourself, in seconds

Drag the sliders for an indicative estimate by application size, across one-off, annual, and subscription cadence. We confirm final scope with you.

Web AppNetwork · roadmap
Standard SaaS app
~120 routes3 auth flows
Est. engagement
$17,600
/ yr
  • Evidence-backed findings
  • Low-noise, evidence-gated
  • SAST + DAST fusion
  • JSON, Markdown & SARIF reports
Get early access

Indicative only. We'll confirm final scope with you directly.

// Models

How web app testing is scoped

P-01

Web App, by size

Scoped on the application's surface: number of routes and the complexity of its auth flows. We confirm the band with you during onboarding.

Brochure
~25 routes · single auth flow
Standard SaaS
~120 routes · few auth flows
Complex platform
~400 routes · rich roles
Enterprise suite
1,000+ routes · custom
P-02 · Roadmap

Network, per asset

External network testing is on the roadmap. When it lands, it will be scoped per asset (per subdomain or IP), with unit costs that step down as your inventory grows. It is not available or priced yet.

// Cadence

One-off, annual, or subscription

One-off

A single point-in-time engagement when you need a fast, authoritative answer.

  • Full verified-findings report
  • Reproduction & remediation steps
  • One free re-test of fixes
Most popular

Annual (compliance)

Two tests a year plus a verified-findings report, built for audit cycles.

  • Everything in One-off
  • Auditor-ready findings report
  • Full action log for evidence

Subscription

Run as often as you like. Each run diffs against the last to surface new, fixed, and regressed findings.

  • Everything in Annual
  • Re-run any time, drift diff each run
  • Deploy triggers on the roadmap

Cadence sets a multiplier on the base per-size price. Re-runs to confirm fixes are included.

// Everything includes

In every engagement, every tier

  • Evidence-backed findings only
  • Low-noise, evidence-gated findings
  • Reproduction steps & remediation guidance
  • Findings routed to GitHub as draft PRs
  • Free re-tests of every fix
  • Reports in JSON, Markdown, and SARIF
  • Full action log for audit & replay
  • Diff vs your last run on every re-run
// Enterprise

Testing at portfolio scale

Dozens of apps, multiple business units, or bring-your-own-LLM (including a fully local model)? We'll build a custom program with volume pricing, an MSA, and security review support.

Get an estimate in thirty seconds.

Use the live calculator above, or have us scope it with you.