Security Assessment
A vulnerability assessment or application penetration test of a web application, API or server environment you own. Findings ranked by severity, each with fix advice, and a retest when the fixes are in.
Quick scan EUR 720 excl. VAT (8 hours); full assessment quoted per phase at EUR 90 per hour excl. VAT. Scope, test window and written authorization are agreed before anything is tested.
- Written authorization first
- Application testing
- Infrastructure check
- Ranked findings
One engagement. Clear deliverables.
Scope, test window, emergency contacts and third-party permission when you host elsewhere.
Authentication, access control, injection, business logic, session handling, file handling.
Open ports, TLS configuration, exposed services, outdated software with known vulnerabilities.
Severity, proof, impact in business terms, and the fix for each item.
Concrete changes for your developers, or I make them with you.
Every finding checked again after the fix, with a closing report.
- 01
Intro call: what you run, what worries you, what must stay untouched.
- 02
Scope and rules of engagement on paper, signed by you.
- 03
Testing inside the agreed window, read-only on production unless agreed otherwise.
- 04
Report and walkthrough, then the retest after your fixes.
No testing without written authorization, no denial of service, no social engineering unless it is named in the scope. I do not test systems you do not own.
Terms in short- Amounts excl. VAT, quote valid 14 days.
- Payment within 14 days, acceptance within 7 days.
- Rights pass to you on full payment.
- General terms and NDA as PDF.
Phalcon to Laravel, module by module, while the platform stayed in daily use. No big-bang switch, no rewrite from scratch.
What would hurt most if it leaked?
Tell me what the system holds and who can reach it. I reply within one working day with the scope I would test first, free, and nothing is tested without written authorization.