Security Audit and Penetration Testing
We test your site and server the way an attacker would: where the entry points are, which data is exposed and what to fix first. From three days, with a report ordered by severity.
Price: from $500 Timeline: from 3 days
This is a starting price. The exact figure and timeline come from your technical brief, and the review is free.
Who it is for
An audit is worth ordering once a system handles payments or personal data and nobody outside the team that built it has ever looked at it. We agree the boundary in writing before the work starts: what is tested, what stays untouched, and at what hour the risky checks run. Anything outside that line we leave alone, even when we can see it from the inside.
Problems we solve
· Unknown code or advertising appeared on the site
· Nobody has ever checked how user data is protected
· Access rights are scattered and undocumented
· Payments are processed and security was never reviewed
· Nobody has ever checked how user data is protected
· Access rights are scattered and undocumented
· Payments are processed and security was never reviewed
What is included
· Mapping the entry points: forms, API, admin panel, uploads
· Checks for the common vulnerability classes
· Access control and role review
· Server configuration and patch level
· A report with severity levels and a fix order
· A re-test after the fixes are applied
· Checks for the common vulnerability classes
· Access control and role review
· Server configuration and patch level
· A report with severity levels and a fix order
· A re-test after the fixes are applied
What we can build
· Site and web application audits
· API and integration audits
· Security-focused code review
· API and integration audits
· Security-focused code review
How we work
· We agree the scope: what is tested and what stays untouched
· We collect exposed data and entry points
· We test and confirm every finding
· We deliver the report ordered by severity
· We help with fixes and re-test
· We collect exposed data and entry points
· We test and confirm every finding
· We deliver the report ordered by severity
· We help with fixes and re-test
Engagement models
· A one-off audit with a report
· Audit and remediation as one engagement
· Regular checks after releases or once a quarter
· Audit and remediation as one engagement
· Regular checks after releases or once a quarter
Stack
Laravel
NestJS
PHP
TypeScript
Python
Celery
Next.js
React
Vue 3
Inertia.js
Blade
Tailwind CSS
PostgreSQL
MySQL
Redis
Meilisearch
iOS
Android
Docker
nginx
PM2
Obsidian
Telegram Bot API
JSON-RPC
Claude API
Industries we do this for
IT for FinTech and Payment Companies
We build and run products that move money: wallets, processing, billing and reconciliation. This is the direction where we have 14+ years of practice and 35+ different payment systems behind us.
Frequently asked questions
How much does an audit cost?
An audit starts from $500. What moves the number is the size of the surface under test: pages and roles, whether an API exists, whether payments are handled. We name the figure once the scope is agreed, and that conversation is free.
How long does an audit run?
From three days for a typical site. A large system with an API takes from a week. The re-test is included in the price: saying a problem is fixed is not the same as showing it.
Will the site stay online during the audit?
Yes. The work is planned so that it does not bring the site down, and any risky test runs only with your written approval and at an agreed time.
What is in the report?
Every finding: where it is, what it leads to, how it was verified and what to do about it. Ordered by severity, because nothing gets fixed all at once.
Discuss your task
Leave a name and a phone number, and we will ask the rest in the conversation.
Have an idea for a new product, or need to grow an existing one?
Tell us about the task. We will study it and propose an option that makes sense technically and economically.
We reply within one business day · Telegram @sbunyod
from $500
Discuss a project