Engagement plans
Priced to your scope. Never to a template.
Every environment is different — asset counts, compliance regime, threat model. We publish structures, not fixed prices. Written proposals delivered within 48 hours of a discovery call.
Starter
For growing teams launching their first security program
Custom Quote
Scoped to your environment
- Single web or mobile application assessment
- Manual + automated testing methodology
- Executive & technical report
- One remediation retest included
- 30-day post-engagement Q&A
Most requested
Business
For scaling organizations with multiple attack surfaces
Custom Quote
Scoped to your environment
- Multi-application & API assessments
- Cloud configuration review (AWS, Azure or GCP)
- Threat modeling workshop
- Quarterly retest cadence
- Incident response tabletop exercise
- Dedicated engagement lead
Enterprise
For regulated enterprises requiring continuous assurance
Custom Quote
Scoped to your environment
- Continuous offensive security program
- 24/7 incident response retainer
- Red team & purple team exercises
- AI/LLM security assessments
- Executive advisory & board reporting
- Regulatory compliance mapping (SOC 2, ISO 27001, PCI-DSS)
- Named senior engineers on-call
Need something outside these structures? We regularly build custom retainers combining offensive security, incident response and secure engineering — talk to us.