/pricing
Transparent pentest pricing.
Per-service pricing in USD, BRL and EUR. Tailored scope on quote — fixed prices for standard engagements.
/external
External Pentest
External Pentest — Basic
Up to 5 IPs/domains. Executive + technical reports.
For: Small organizations with limited public infrastructure.
External Pentest — Advanced
Unlimited scope, includes OSINT. Full report + retest.
For: Mid-to-large enterprises requiring deep assessment.
/internal
Internal Pentest
Internal Pentest — Basic
Internal network up to 50 hosts, no Active Directory.
For: Small networks without Windows domain.
Internal Pentest + Active Directory
Full network + AD with domain escalation.
For: Enterprise environments with complex directory.
/wifi
Wi-Fi
Corporate Wi-Fi Assessment
Network analysis, WPA/WPS attack, Evil Twin simulation.
For: Organizations with wireless infrastructure.
/webapp
Web & API
Web App — Basic (OWASP Top 10)
Single application, OWASP standard vulnerabilities.
For: Smaller web app portfolios.
Web App — Advanced + API
Business logic, authentication, REST/GraphQL.
For: Complex applications with API-driven architecture.
/server
Servers & Infrastructure
Windows Server Assessment
Hardening, CVEs, service exposure, RDP/SMB.
For: Organizations with Windows infrastructure.
Linux Server Assessment
Privilege escalation, SUID, service enumeration.
For: Linux deployments.
iDRAC / iLO / IPMI
Out-of-band management interfaces.
For: Dell, HP, Supermicro hardware.
VMware / Hyper-V
VM escape, hypervisor configuration flaws.
For: Virtualized environments.
/network
Network Equipment
Cisco IOS / NX-OS
CVE analysis, default credentials, SNMP, routing.
For: Cisco-based networks.
Fortinet / Mikrotik / Ubiquiti
Firmware, admin panel, VPN, firewall rules.
For: Alternative network vendors.
/social
Social Engineering
Phishing Campaign
Up to 100 targets. Click-through and credential capture report.
For: Workforce awareness measurement.
Executive Spear Phishing (BEC)
Custom targeting. Business Email Compromise simulation.
For: C-suite and high-value employees.
/ptaas
Pentest as a Service
PTaaS — Starter
1 pentest/month with rotating scopes. Tech team access.
For: Continuous security validation.
PTaaS — Professional
Unlimited engagements. Dashboard, tracking, 24h SLA.
For: Enterprise continuous monitoring.
/redteam
Red Team
Red Team — Full Engagement
APT simulation, multi-vector, objective-based.
For: High-security organizations needing realistic adversary simulation.
From
/agendamento
Or book a 30-min meeting
Talk live with our team. No commitment.
Not sure which one fits? Send your context — we'll suggest the right scope.
/certificacoes
Certifications
/clientes
Trusted by
