Our pricing
Three complementary approaches to secure your SaaS. Choose the plan that fits your maturity and your stakes.
Real-world testing
We put ourselves in an attacker's shoes — no access to your code.
Our "real-world" audits reproduce the approach of a malicious actor. We explore your application from the outside, with no access to your source code or infrastructure. The goal: identify what an attacker, competitor, or curious client could find and exploit. You get a snapshot that mirrors reality, not a theoretical checklist.
An independent cybersecurity consultant typically charges between €800 and €1,500 per day. For a first review, expect 2 to 5 days of work, or €1,600 to €7,500. Our First Review is delivered in 48h for €1,900, with a prioritized report and debrief included. A traditional pentest usually costs between €5,000 and €25,000 and takes 2 to 6 weeks. Our Full Audit starts at €5,000 for 5 to 15 days, with post-fix re-testing included — without tying up your team for weeks.
First Review
From €1,900
Ideal for : Before a client audit, a security questionnaire, or for a first assessment.
- Public exposure: pages, API routes, accessible documents
- Risks ranked by priority
- Technical debrief with your team
- Summary report
Full Audit
From €5,000
Ideal for : For a complete assessment with a concrete fix plan.
- In-depth analysis of all entry points
- Issues ranked by business impact
- Affected data and user paths
- Action plan matched to your stack
- Post-fix verification included
- Ready-to-paste answers for your security questionnaires
Ongoing hygiene
A permanent outside eye, without hiring.
Your application evolves constantly: new features, new integrations, new access points. Ongoing monitoring keeps an external eye on your attack surface continuously, without mobilizing an internal security team.
Hiring an in-house security lead costs roughly €60,000 to €90,000 per year. Ongoing monitoring gives you a permanent outside perspective for a fraction of that cost.
Ongoing Monitoring
Custom
Ideal for : For teams shipping fast and wanting to stay in control.
- Regular checkpoints after each release cycle
- Detect new exposures
- Independent perspective on your product choices
- Re-checks after your changes
- Team awareness workshop (optional)
Code Review
We dive into your code to find the invisible.
Some flaws can't be seen from the outside. Unprotected business logic, incomplete access controls, hardcoded secrets: code review catches what no external test can find. You give us access to your source code, we read it, understand it, and find the flaws.
Source-code audits are usually priced between €5,000 and €30,000 depending on scope. Our quote is adjusted to the real size of your codebase and the complexity of your business logic.
Code Review
Custom quote
Ideal for : For teams wanting to go beyond what's visible from the outside.
- Reading and analyzing your source code
- Detecting flaws invisible from the outside
- Business logic and access control review
- Server configuration and exposed secrets audit
- Detailed report with risk-based prioritization