Simple, Transparent Pricing

Security consulting and penetration testing packages. No hidden fees. Start with a risk-free engagement or jump straight to a pentest.

Security Consulting

Zero-risk entry points. Start here if you're unsure what you need.

Start Here

Security on Demand

Zero risk, one-time

INR 9,999 + taxes

Full refund if you don't continue. Continue with us, and the INR 9,999 comes off your next engagement.

4 Hours Founder-Led
Both founders work on your session directly. No junior analysts, no account managers, no sales calls.
1-2 Fixes or Diagnosis
Not a slide deck. We fix or document real security issues in your stack during the session.
Clear Next Step
You get a recommendation: pentest, retainer, or you're good for now. No upsell pressure.
Zero Risk: 100% Refundable
Don't continue? Full refund, no questions asked. Continue with us, and the INR 9,999 comes off the price.
Same Senior Team
OSCP, CISSP, CEH, ISO 27001 LA, CompTIA PenTest+ certified. The team on this session is the same team on every engagement. No handoffs.

Best Suited For: You have security gaps but don't know where to start or who to trust.

Book 4 Hours

Security Retainer

Deeper engagement, one-time

INR 24,999 + taxes

One-time purchase. 30-day validity + free 30-day extension if needed.

10 Hours Founder-Led
Both founders work on your tasks directly. Enough time for meaningful deliverables, not just advice.
Your Pick: Reviews, Hardening, or Advisory
Architecture review, cloud hardening, SDLC guidance, policy docs, incident response planning. You decide.
Test-Drive Before Fractional Security
See how we work before signing a 3-month fractional engagement. If it's a fit, the transition is seamless.
30-Day Validity + Free 30-Day Extension
Use the 10 hours at your pace. If you need more time, one free extension. Non-refundable.
Same Senior Team
OSCP, CISSP, CEH, ISO 27001 LA, CompTIA PenTest+ certified. The team on this retainer is the same team on your fractional engagement. No bait and switch.

Best Suited For: You want real deliverables before signing a 3-month fractional engagement. This is the proving ground.

Book 10 Hours

Penetration Testing

AI, Web, API, Android, iOS, Cloud, and IoT. Pick the plan that fits your scope.

Startup Pentest Plan

For early-stage startups

INR 74,999 + taxes
1 Scope Included i 1 scope = 1 application type. E.g., your web app is 1 scope, your API is another. Each scope gets a dedicated 7-day testing window. Need 2+ scopes? The Growth plan is built for that.
Pick one: your web app, API, mobile app, cloud, or IoT. One target, tested thoroughly.
Investor-Ready Report i Technical report has full vulnerability details, reproduction steps, and fix guidance. Executive report is a 2-page summary with risk ratings for leadership.
Technical details for your dev team + executive summary for your investor or enterprise client.
Methodology i Industry-standard methodology covering the OWASP Top 10 vulnerability categories and PTES (Penetration Testing Execution Standard) framework.
OWASP Top 10 + PTES (Standard Grey-box Pentest).
Report in 7 Calendar Days i 7 calendar days from kick-off to final report delivery. 5 working days of active testing.
Not 3 weeks. Kick-off to final report in one week, so your investor deadline doesn't slip.
1 Retest Included i After you fix the vulnerabilities we found, we retest everything to confirm fixes are effective. Included within 30 days of the initial report.
We retest all findings within 30 days. No extra charge. Your report shows "remediated" not "open".
Brand Protection Snapshot i During recon, we check for typosquatting domains, fake apps impersonating your brand, leaked credentials on the dark web, and phishing infrastructure targeting your company.
We check if anyone is impersonating your domain, if your credentials are leaked, and what's exposed on the dark web.
+1 Scope at INR 44,999 i Need 2 scopes with compliance mapping, 2 retests, and deeper testing? The Growth plan includes all of that for INR 1,79,999 — better value for multi-scope engagements.
Max 2 scopes on this plan. Need more? The Growth plan is built for that.

Best Suited For: An investor or enterprise client asked for a pentest report. You have one or two apps to test and no compliance deadline.

Book Startup Pentest
Most Popular

Growth Pentest Plan

For scaling businesses

INR 1,79,999 + taxes
2 Scopes Included i 2 scopes = 2 application types tested. E.g., web app + API, or Android app + iOS app. Each platform counts as a separate scope.
Test your web app + API together, or any two targets. Most startups have at least two attack surfaces.
Investor-Ready Report + Compliance Mapping i Technical report has full vulnerability details, reproduction steps, and fix guidance. Executive report is a 2-page summary for leadership. Compliance mapping ties findings to SOC 2 Trust Services Criteria and ISO 27001 Annex A controls.
Technical report + executive summary + every finding mapped to SOC 2 and ISO 27001 controls. Your auditor can use the report directly.
Methodology i Beyond standard methodology. Includes chained exploits, privilege escalation, and lateral movement simulation on top of OWASP Top 10 and PTES coverage.
OWASP Top 10 + PTES + Real-world Attack Simulation.
Report in 10 Calendar Days i 10 calendar days from kick-off to final consolidated report. Choose parallel testing for faster delivery or sequential testing to stagger timelines.
Deep enough to catch business logic flaws, fast enough for your deadline. Simultaneous or sequential testing, your choice.
2 Retests Included i Full retest: we retest all findings after you fix them. Sanity retest: a lighter check after minor fixes or a second round of remediation.
Full retest after your first round of fixes + a sanity check after final tweaks. Your report closes clean.
Brand Protection Snapshot i During recon, we check for typosquatting domains, fake apps, leaked credentials on the dark web, and phishing infrastructure targeting your company.
Domain impersonation, leaked credentials, dark web exposure. Know what attackers already know about you.
+1 Scope at INR 74,999 i Each additional scope gets its own dedicated testing window, findings section, and compliance mapping included.
No limit on scopes. Add as many as you need.

Best Suited For: You need two attack surfaces tested together (e.g., web app + API), or an auditor needs SOC 2 / ISO 27001 evidence from your pentest.

Book Growth Pentest

Compliance, CTI & Fractional Security

Scoped per engagement. Talk to us for pricing.

Compliance as a Service

SOC 2 Type 2 & ISO 27001 internal audit prep: gap assessment, control mapping, and policy documentation. Pairs naturally with pentest evidence.

Scoped per engagement

Cyber Threat Intelligence

Dark web monitoring, leaked credential detection, brand impersonation alerts, and threat landscape reports. Every pentest includes a CTI snapshot. Need deeper coverage? Start with a one-time assessment or upgrade to continuous monitoring.

One-time or continuous (monthly/quarterly)

Fractional Security Team

Dedicated AppSec, InfraSec, or GRC hours. Vulnerability management, security monitoring, IAM audits, SDLC integration, and incident response planning. 2 to 8 hrs/day, 3-month minimum.

3-month minimum commitment

Pricing FAQ

What is the difference between the Startup and Growth pentest plans?

The Startup plan covers 1 scope in 7 days with a technical report, executive summary, free retest, and Brand Protection Snapshot. The Growth plan covers 2 scopes in 10 days and adds SOC 2 + ISO 27001 compliance mapping, a second sanity retest, and real-world attack simulation beyond OWASP Top 10. Choose Growth if you have a compliance deadline or an enterprise deal in the pipeline.

What is the Brand Protection Snapshot?

During the discovery phase of every pentest, we check for typosquatting domains, fake mobile apps impersonating your brand, leaked credentials on the dark web, code exposure on public repos, and phishing infrastructure targeting your company. Included with both pentest plans at no extra cost. See it in our sample report →

Can I see a sample report before buying?

Yes. We publish a full redacted sample showing the exact structure, finding format, compliance mapping, and Brand Protection Snapshot you receive. You can view it online or download it as a PDF. View sample report →