Security
We inspect your software — web apps, mobile apps, APIs and smart contracts — find the weaknesses before an attacker does, and help your team fix them until the system is secure, with a report your team can read and act on.
Who it is for
- Businesses that handle customer data, payments or ID documents
- Owners about to launch a web app or mobile app
- Companies whose partners or customers ask for a security test
What you get
- Testing of your web app and API the way a real attacker would try
- Smart-contract review for Web3 projects
- A written report: each problem, how serious it is, and how to fix it
- A re-test after your team fixes the issues
How we work
- 01
Scope and permission
We agree in writing exactly what may be tested, and on which system.
- 02
Test
Hands-on testing, preferably on a staging copy so live customers are not affected.
- 03
Report
Findings ranked by severity, with steps your developers can follow.
- 04
Re-test
We confirm the fixes work.
Questions
Will testing break our live system?
We prefer a staging copy. On live systems we agree limits first and avoid anything that could disrupt customers.
Is the report confidential?
Yes. It goes only to you; published summaries on our portfolio come only from public bug-bounty programmes.
What does it cost?
Starts from the price shown above for one system, and depends on its size.