Single assessment
From ₹60,000
A specific application, API or environment
- Fixed scope and price
- Report and remediation call
- Free retest within 30 days
- Attestation letter
Pricing
What a security engagement costs
Short answer
A professional penetration test in India typically costs between ₹60,000 and ₹4,00,000 depending on scope. A single web application usually lands at ₹75,000 to ₹1,50,000, a mobile app with its backend at ₹85,000 to ₹2,00,000, and a small cloud environment at ₹70,000 to ₹1,50,000. Price is driven by testable surface, not company size.
| Engagement | Duration | Indicative from | Retest |
|---|---|---|---|
| Mobile App Penetration Testing | 2–3 weeks | ₹85,000 | Included |
| Web Application Penetration Testing | 2–3 weeks | ₹75,000 | Included |
| API Security Testing | 1–2 weeks | ₹60,000 | Included |
| Secure Code Review | 1–3 weeks | ₹65,000 | Included |
| Cloud Security Assessment | 1–2 weeks | ₹70,000 | Included |
| Threat Modelling & Security Architecture Review | 1 week | ₹45,000 | Included |
| Developer Security Training & DevSecOps | 1–2 days on-site, plus setup | ₹35,000 per day | Included |
Indicative bands for scoping conversations, not a quote. Final price is fixed in the proposal after scoping and never changes mid-engagement unless you change the scope in writing.
Engagement models
Pre-launch bundle
From ₹1,50,000
A product about to ship or raise
- Threat model + app test + API test
- Findings streamed as confirmed
- Two remediation sessions
- Free retest of everything
Security partner retainer
From ₹40,000 / month
Teams shipping continuously
- Quarterly focused testing
- Design review on request
- CI gate maintenance
- Priority incident support
What drives the number
- Roles and permissions. Every additional role multiplies the authorisation testing matrix, which is where the serious findings are.
- Surface size. Screens, endpoints, accounts — counted, not estimated, during scoping.
- Money and personal data. Flows carrying either need business-logic testing, which is manual and slow by nature.
- Environment. Production-only testing needs tighter controls and more coordination than staging.
- Documentation needs. Compliance mappings and evidence packs add reporting time.
What is always included
- A fixed price, agreed before work starts
- Findings shared as confirmed, not held back for the report
- A remediation walkthrough call with your engineers
- A free retest of every fixed finding within 30 days
- An attestation letter you can share with customers
Want this tested properly?
Scope and a fixed quote within two working days. First consultation is free.