Pricing
Published prices, confirmed scope, no discovery funnel
Everything below is a starting price. Tell us what you are building and we confirm the scope in writing with a fixed quotation before any work begins, no hourly surprises and no work you did not approve.
Web & API Security
Manual security testing built around how the application and its business workflows actually operate.
| Service | Best for | Price |
|---|---|---|
| Focused Security Review | One critical feature or workflow | From $250 |
| Small Web Application Pentest | Small app with limited functionality | From $500 |
| Standard Web Application Pentest | Broader application coverage | From $700 |
| Web Application + API Pentest | Web interface and supporting APIs | From $1,000 |
| Multi-Role / Multi-Tenant SaaS Pentest | Roles, permissions and tenant isolation | From $1,400 |
| Security Hardening & Configuration Review | An existing site, server or platform reviewed against its configuration | From $200 |
| Additional Retest | Extra or delayed verification cycle | From $200 |
The focused review covers one agreed feature and is not presented as a complete application penetration test. Testing requires written authorization and agreed rules of engagement.
Cloud & DevOps
Practical engineering support that makes deployment, infrastructure and day-to-day operations more predictable.
| Service | Best for | Price |
|---|---|---|
| Linux / VPS Configuration & Hardening | A server that was set up quickly and never reviewed | From $150 |
| Production Docker Deployment | Containerising an application and running it reliably in production | From $250 |
| Monitoring & Alerting Setup | Finding out about problems before your customers do | From $250 |
| CI/CD Pipeline Setup | Replacing manual releases with a repeatable pipeline | From $350 |
| AWS or Terraform Deployment | Infrastructure defined in code rather than clicked together | From $800 |
| Monthly DevOps Support | Ongoing scheduled help, with the included hours agreed in the proposal | From $350 / month |
Every price is a starting point for a defined piece of work. The final figure depends on how many environments, services and integrations are involved, and it is fixed in writing before anything starts. Hosting fees, cloud usage and third-party licenses are billed separately by their providers. Support is scheduled and does not include a 24/7 operations centre or guaranteed emergency response.
WordPress & Shopify
Professional websites and stores delivered with practical security, performance and maintainability in mind.
| Service | Best for | Price |
|---|---|---|
| Landing Page | Template-based single-page presence | From $150 |
| Professional WordPress Website | Small professional or service website | From $500 |
| WordPress Business / E-commerce Website | Business site or starter online store | From $600 |
| Shopify Store Setup | New store configuration and launch | From $700 |
| Customized Shopify Store | Theme and section customization | From $900 |
| Speed & Core Web Vitals Optimisation | A site that works but loads slowly enough to cost traffic | From $250 |
Hosting, domains, premium themes, paid plugins, Shopify apps, extensive product entry, copywriting and custom application development are quoted separately. Security review of an existing site is priced under Web & API Security, and ongoing care is priced under SEO & Ongoing Care, so nothing is listed in two places.
SEO & Ongoing Care
Ongoing services for visibility, website health and reliable operations.
| Service | Best for | Price |
|---|---|---|
| Maintenance & Updates | Routine WordPress or Shopify care | $120 / month |
| Website Care | Enhanced security, performance and support | $250 / month |
| Local / Business SEO | Service businesses and local visibility | $450 / month |
| E-commerce SEO | Products, collections and organic discovery | $450 / month |
| Technical SEO Audit | A one-off audit with a prioritised fix list, no retainer | From $350 |
| Growth & Reliability | Combined website, SEO and DevOps support | $900 / month |
SEO is an ongoing process. Rankings, traffic and sales cannot be guaranteed. Content production, backlink campaigns and paid advertising sit outside these plans unless separately agreed. Infrastructure retainers are priced under Cloud & DevOps rather than repeated here.
Launch & Growth Bundles
Combined packages for clients who want one accountable partner across launch, security and ongoing operations.
Secure Website Launch
Professional-service companies launching or replacing a WordPress website
From $1,500
- Professional WordPress website within the agreed page and feature scope
- Secure administrative configuration, backups and baseline hardening
- Essential technical and on-page SEO setup
- Production deployment, launch checks and 30 days of Website Care
Secure E-commerce Launch
Businesses launching a starter Shopify or WordPress-based store
From $1,800
- Store setup and theme customization within the confirmed scope
- Payments, shipping, customer-account and administrative configuration review
- Security hardening and an e-commerce SEO foundation
- Launch checks and 30 days of Website Care
Most complete
SaaS Launch Readiness
SaaS teams preparing for release or onboarding larger customers
From $3,000
- Manual web application and API penetration testing
- Authentication, authorization, session and tenant-isolation testing
- Deployment and cloud-configuration review within the agreed environment
- Logging and monitoring readiness review
- Prioritized remediation guidance and one standard retest
These are starting prices. Large catalogs, complex integrations, numerous roles, extensive APIs or urgent delivery require a custom quotation.
The fine print, up front
How pricing and scope actually work
Security work is easy to over-promise. These are the boundaries we hold ourselves to, in the same words we use in the agreement.
- All prices are in USD and are starting prices unless a fixed rate is stated.
- Final pricing depends on scope, application size, user roles, integrations, urgency and required deliverables.
- Third-party costs such as hosting, cloud usage, domains, paid themes, plugins, apps and subscriptions are excluded.
- Penetration testing requires written authorization and agreed rules of engagement before testing begins.
- Any work outside the approved scope is quoted separately before it is started.
Send us the scope and get a fixed quotation
Include the platform, the roles, the environment we can test against and your deadline. If a smaller engagement is the honest answer, we will tell you that instead.