Priced by scope,
not by seat.
Every engagement gets a fixed quote sized to what you actually need tested. Tell us the scope — the quote follows within one business day.
Assessment
One app, API or surface — before a launch, an audit or a big customer deal.
- Free scoping call + signed rules of engagement
- Engine-driven testing, every finding human-verified
- Signed case-file report with CVSS + OWASP mapping
- Fix guidance your developers can act on
- Retest of fixed findings included
Continuous testing
For teams shipping every week — testing that keeps pace with your releases.
- Everything in Assessment, on a recurring schedule
- Re-tests when you ship changes
- Live dashboard: posture, findings, coverage
- Support tickets with the OctaSec team
- Attack-surface monitoring of new hosts
Enterprise
Many apps, subsidiaries — or a portfolio of clients you secure for others.
- Corporate portal: staff accounts + client sub-accounts
- Client authorisation-to-test tracking built in
- Compliance mapping (ISO 27001, PCI DSS, Bangladesh Bank ICT …)
- Named lead operator and custom SLAs
- Volume pricing across engagements
Six things shape every quote.
Surface size
How many apps, APIs and hosts are in scope.
User roles
Each role (admin, staff, customer) multiplies the access-control paths to test.
Test depth
Black, grey or white box — what access and documentation you share.
Environment
Production needs gentler pacing and tighter windows than staging.
Timeline
A fixed deadline or a narrow test window can change the plan.
Compliance
Mapping findings to a framework your auditor or regulator expects.
No add-ons for the basics.
- Human verification of every finding — no scanner noise
- Signed report: severity, root cause, proof, fix
- CVSS 3.1 scores and OWASP mapping
- Retest of fixed findings
- Authorised testing only, under signed rules of engagement
- Non-destructive by default
Straight answers.
Why is there no list price? +
Two apps of the same "size" can need very different effort — roles, integrations and business logic change everything. We quote per scope so you never pay for testing you don't need.
How fast do I get a quote? +
Within one business day of your request. Most quotes follow a 30-minute scoping call; for simple scopes we can quote from the form alone.
Is the quote fixed? +
Yes — once the scope is agreed, the price is fixed. If you want to add targets later, we quote the addition separately before any work starts.
Can you sign an NDA first? +
Of course. Mention it in the request and we'll send ours, or review yours, before the scoping call.
Get a fixed quote in one business day.
Tell us what you need tested — or book a call and we'll scope it together.