A Simpler Way to Buy
Penetration Testing Services
Web Applications · APIs · External Infrastructure
Specialist-led penetration testing. Clear scope. Fixed pricing.
£2,950 + VAT
Fixed fee per application
External Infrastructure Testing
Up to 20 external targets
£1,800
+ VAT
Available as a standalone test or alongside application testing. Each block covers up to 20 authorised public-facing targets, with each IP address or fully qualified domain name (FQDN) counting as one target.
What can we test?
Our penetration testing services go beyond standard checklists to identify security risks specific to your web applications, APIs and external infrastructure.
PLATFORM AUDIT
Web Applications
Authenticated and unauthenticated web applications, including user roles, access controls, sessions, business logic and technical vulnerabilities.
tester.qualification: CERTIFIED
DATA GATEWAY
APIs
Standalone APIs or APIs supporting your web application, including REST, GraphQL and other common API technologies.
testing.approach: SPECIALIST_LED
EXTERNAL PERIMETER
External Infrastructure
Black-box penetration testing of public-facing targets, simulating the perspective of an attacker on the internet.
report.findings: VALIDATED
Simple from start to finish
01
Review coverage
Review what is included in each fixed-price test and make sure the service is suitable for your application, API or external infrastructure.
02
Buy your test
Complete your purchase through our secure online checkout or request a traditional business invoice.
03
Confirm your scope
Complete the online Test Details and Authority to Test form so we can validate the scope and formally approve the engagement.
04
We test
Testing will begin within 3 working days of approval or on your selected future date. Your engagement is delivered by a qualified tester.
05
Report delivery
Receive a professional penetration testing report with verified findings, supporting evidence and clear remediation guidance, typically within 10 working days of the start date.
06
Retesting
A complimentary retest is included. Let us know which findings have been remediated or mitigated, and we will reassess them and issue a retest report confirming the outcome.
.png)