Pricing
Priced for teams that are scaling.
Fixed prices, agreed in writing before testing starts. Half when you approve the scope, half when we deliver the report. The first check of your fixes is included.
Engagement tiers
Starter VAPT
First test
One web app or API. Good for a first test before a fundraise or launch.
Standard VAPT
Most teams
App, API and cloud together. The usual fit for Series A teams.
AI or IoT
New surfaces
LLM features, agents, or a connected device and its firmware.
Enterprise
Several products
Multiple products and surfaces, scoped around your roadmap.
Every engagement includes
- A 30-minute scoping call and a fixed price in writing within 48 hours
- Automated attacks plus manual testing of every page and endpoint in scope
- Certified testers you talk to directly
- A technical report and a managerial report by day 12 to 14
- A live walkthrough of every finding
- Support for your developers while they fix
- A check that your fixes hold
- A certificate valid for 3 to 6 months, verifiable in our Trust portal
Retests and annual contracts.
Your product keeps changing, so your assurance should too. Here is what keeping a certificate current costs.
What testing costs elsewhere.
Most firms do not publish prices. These figures come from published 2026 pricing guides and industry timelines, global and Indian, so you can compare like for like.
| Option | Typical price | Time to report | What you get |
|---|---|---|---|
| A typical penetration test | About $18,300 on average; $10,000 to $30,000 for most engagements1 | 4 to 6 weeks from planning to final report2 | A report. Retests, walkthroughs and certificates vary by firm. |
| A web app or API test | $5,000 to $30,000 or more, depending on complexity1 | 4 to 5 weeks on average3 | Varies by firm. |
| A web app VAPT in India | INR 40,000 to 3.5 lakh, depending on complexity. Quotes under INR 20,000 to 40,000 are usually automated scans, not manual tests45 | 1 to 3 weeks of testing, plus reporting4 | Varies by firm. |
| DXCL | $3,000 to $10,000 for most engagements; Enterprise from $25,000. Fixed in writing. | Day 12 to 14 | Technical and managerial reports, a live walkthrough, support while you fix, a fix check and a verifiable certificate. |
The cost of not testing.
average cost of a data breach in India, a record high.
IBM, Cost of a Data Breach 2026: Indiamaximum DPDP Act penalty for failing to take reasonable security safeguards.
Press Information Bureau, 2025of worldwide annual turnover, or EUR 20 million if higher: the top GDPR fine.
GDPR, Article 83(5)median time to fully fix a critical, actively exploited vulnerability in 2025.
Verizon, DBIR 2026Sources
- Synack, How much does a pentest cost? 2026 pricing guide (June 2026).
- Halock Security Labs, How much time is needed to perform a typical penetration test? (2024).
- Schellman, How long does a penetration test take? (2024).
- Tranquility Cybersecurity, VAPT cost in India, 2026 (updated June 2026).
- CyberSigma Consulting Services, VAPT cost in India (updated June 2026).
Questions
Are prices fixed?
Yes. You get a fixed price in writing after the scoping call, before any testing starts. It does not change unless you change the scope.
How is payment structured?
Half when you approve the scope, half when we deliver the report.
What does a retest cost?
The first check of your fixes is included. A later full retest, for example to renew an expired certificate, costs 70% of the original fee, or 50% on an annual contract.
Who does the testing?
Certified security testers, the same people you meet on the scoping call. No account managers sit between you and the people who find and explain the issues.
Tell us what you’re shipping.
A fundraise, an enterprise deal, an AI launch. Send a line about your product and we come back with a fixed-price scope within 48 hours.
Or email [email protected]