The engagement menu
Six ways to put your systems under real pressure — from a single external test to a standing incident-response line. Every engagement below carries a fixed scope and a named price, agreed on the scoping call before an invoice ever appears.
What we do, in the open
The figures below are honest starting points. A five-page brochure site and a fifty-endpoint estate aren't the same test, so the final number is settled once we've seen the shape of your environment — never after.
We take the attacker's seat on the public internet and work against everything you expose — web apps, login portals, mail, remote access. Manual exploitation carries the load; the scanner is only there to sweep the corners. You end with proof of what could be reached and the exact route to close it.
A deep pass on a single application — authentication, session handling, access control, injection, business logic and the flaws a checkout or portal quietly hides. Tuned to the OWASP categories, but graded by what a breach would actually cost you rather than by a generic severity chart.
The test that answers the question nobody enjoys: what happens once someone is already inside — a phished laptop, a rogue contractor, a lost badge? We work outward from a foothold to see how far lateral movement and privilege escalation carry, and where a single machine turns into the whole domain.
The whole picture in one engagement — external and internal testing, a cloud and identity configuration review, and a phishing simulation your team won't see coming. It ends with a board-ready summary and a prioritised roadmap you can hand to leadership, an insurer, or a new developer without a single translator in the room.
Most modern breaches aren't a clever exploit — they're a bucket left open, a role granted too much, or an admin account without a second factor. We read your AWS, Azure or Microsoft 365 tenant the way an attacker enumerates it and hand back a hardening plan ranked by blast radius.
A standing line for the day something goes wrong — with a guaranteed response window written into the agreement and a playbook we build together while everything is still calm. Containment, forensics and recovery help when it hits, plus a quarterly tabletop so the bad day is boring by the time it arrives.
Prices exclude Ohio sales tax where applicable. Multi-engagement, non-profit and staged-payment rates are settled on the call — just ask.
Standard on every job
The price differs; the standard doesn't. Whether you book a single web-app test or a full audit, the finish line looks the same — clarity you own, and a person who'll pick up the phone.
One plain-language summary for whoever signs off, one technical appendix for whoever fixes it. Every finding scored by exploitability and business impact, with the remediation steps spelled out — not a raw scanner dump.
Fixing the holes is the whole point. Within thirty days of your report we re-run the confirmed findings at no extra charge and mark each one closed, so you leave with a clean loop instead of a to-do list.
What's in scope, what's off-limits, staging or production, and which hours to avoid — all agreed in writing before a single packet is sent. Destructive checks only ever run with your sign-off.
The same person who broke in walks you through what they found and answers the questions the document can't. Your report, your retest and your debrief carry one signature — start to finish.
Bolt-ons & one-offs
Not every worry needs a full test. These slot alongside an engagement — or stand alone when the ask is narrow and specific.
From $2,200 / campaign
From $1,850 / session
$315 / hour
Not on a retainer and mid-incident? Call anyway — (614) 974-7277 — and we'll tell you honestly whether we can move fast enough to help.
Start here
Fifteen minutes on the phone is enough to tell us both whether there's a fit — and to turn a "From" price into a real one. If you don't need us yet, we'll say so.
Talk to a tester
(614) 974-7277