Vulnerability scanning

External attack surface assessment

OWASP Top 10 coverage

CVE identification and severity rating

Detailed findings report

Remediation recommendations

Single scope (one app or domain)

Results delivered within 5 business days

Everything in Essentials

Manual penetration testing by certified engineers

Authentication and authorisation testing

Business logic flaw detection

API security testing

Session management analysis

Exploit chaining and risk validation

Executive summary + technical report

30-day remediation support window

APT style simulation (real-world attack scenarios) using our bespoke lab threat intelligence

Internal network penetration testing

Social engineering and phishing simulation

Cloud infrastructure review (AWS / Azure / GCP)

Active Directory and identity security testing

Third-party integrations assessment

Retesting after remediation

Dedicated security engineer throughout

Board-ready executive report

90-day support window

Add on: Physical security assessment