Application security review for early SaaS

A fixed-scope review of your web app and core code. English report in 10 business days. One retest in 30 days.

Starting at $1,800.

Who this is for

• Seed to Series A SaaS asked for a security letter by a customer
• Teams preparing SOC 2 who need an application test on the calendar
• Development shops that need a review they can attach to a client handoff

What you get

• Review of the agreed web/API surface
• Focused review of auth, access control, secrets, and the modules you name
• English report a customer or auditor can read
• One retest of fixed items within 30 days

What this is not

• Not a red team
• Not social engineering or physical testing
• Not an unlimited pentest
• Not work on systems you have not authorized in writing
• Not HIPAA, government, or export-controlled source
• Not a certified audit firm and not a SOC 2 attestation

How we work

Contracting entity is our US company.

A small remote delivery team works under least-privilege access and an access log.

If the code cannot travel, say so before we start — we will decline rather than improvise.

Payment is 50% to start and 50% on report delivery.

Price

• Public-surface screen (optional, not a pentest): $250
• Small-scope application review: $1,800–$3,500
• Broader review after a sample report exists: quoted separately

Start

Send a note through Contact. Include the app URL, a short description, and whether source access is possible.

We reply with scope and a SOW. No call required to start.