Mobile App Penetration Testing
Mobile app penetration testing is a manual security assessment of an Android or iOS application, its local storage, its runtime and the APIs behind it. Testing follows th...
Services
Security engagements, priced as a fixed scope
Short answer
Seven engagement types are offered: mobile app penetration testing, web application penetration testing, API security testing, secure code review, cloud security assessment, threat modelling and developer security training. Each is fixed-scope and fixed-price, mapped to an OWASP standard, and includes a free retest of every fixed finding.
Web Application Penetration Testing
Web application penetration testing is a manual assessment of a live web application performed with real user accounts, targeting broken access control, injection, authen...
API Security Testing
API security testing is a manual assessment of REST, GraphQL or gRPC endpoints against the OWASP API Security Top 10. It targets broken object and function level authoris...
Secure Code Review
Secure code review is a manual inspection of source code focused on the paths where security actually fails: authentication, authorisation, payment handling, cryptography...
Cloud Security Assessment
A cloud security assessment reviews IAM permissions, network exposure, storage access, secrets management and CI/CD pipeline trust boundaries across AWS, GCP or Azure. Fi...
Threat Modelling & Security Architecture Review
Threat modelling is a structured design review that maps data flows and trust boundaries, enumerates how each component can be abused, and ranks the controls worth buildi...
Developer Security Training & DevSecOps
Developer security training is a hands-on workshop where a team exploits vulnerabilities in its own application and then fixes them, followed by wiring the matching check...
Compare at a glance
Indicative starting prices for scoping conversations. The proposal fixes the number after scoping.
| Engagement | Best for | Standards | Duration | From |
|---|---|---|---|---|
| Mobile App Penetration Testing | Fintech and payments apps | OWASP MASVS | 2–3 weeks | ₹85,000 |
| Web Application Penetration Testing | SaaS platforms with multi-tenant data | OWASP ASVS | 2–3 weeks | ₹75,000 |
| API Security Testing | Mobile backends | OWASP API Security Top 10 | 1–2 weeks | ₹60,000 |
| Secure Code Review | Teams inheriting a legacy codebase | OWASP ASVS | 1–3 weeks | ₹65,000 |
| Cloud Security Assessment | Teams whose infrastructure grew faster than its policies | CIS Benchmarks | 1–2 weeks | ₹70,000 |
| Threat Modelling & Security Architecture Review | Products in design or major refactor | OWASP Threat Modeling | 1 week | ₹45,000 |
| Developer Security Training & DevSecOps | Teams of 4–30 engineers | OWASP SAMM | 1–2 days on-site, plus setup | ₹35,000 per day |
Want this tested properly?
Scope and a fixed quote within two working days. First consultation is free.