Continuous security, starting monthly.

A practical monthly cycle

1. Agree your assets, authority, methods and priorities.
2. Review changes and run scheduled checks supported for your scope.
3. Select professional work within your available hours.
4. Validate findings and fixes; receive coverage and remaining gaps.

Hours include scoping, testing, validation, peer review, meetings, reports and retests. Unused hours can carry into the next paid month only, capped at one monthly allowance. Large assessments and specialist work are estimated separately, with existing hours allocated once.

Clear scope and evidence

Web/API work maps to OWASP ASVS and WSTG; mobile to MASVS and MASTG; desktop to TCASVS and platform guidance; IoT to applicable ISTG, NIST and ETSI requirements. Each engagement identifies the exact standard version, tested build, evidence, exclusions and unknowns.

Full assessments, regulatory TLPT, certification, specialist physical testing, 24/7 monitoring and incident containment require separately qualified arrangements.

• Monthly subscription, billed in advance in USD plus applicable taxes. No annual minimum.
• Professional time includes scoping, testing, validation, independent review, meetings, reporting and retesting.
• Unused time may roll into the next paid month only, capped at one monthly allowance. Work must be scheduled against available capacity.
• No automatic overage, production changes, or scanning outside the written scope. Specialist work and large assessments require an approved estimate.
• Cancel renewal in the billing portal; service continues through the paid period. Provider inability to deliver agreed work is handled by an agreed reschedule or proportionate remedy.
• Response targets apply during the agreed support hours and concern acknowledgement, not resolution. This is not a 24/7 SOC or incident-containment service.
• A subscription, payment or calendar booking does not authorize a security test. Asset authority, permitted methods and stop contacts are agreed separately.

Application, agreement, then billing

Apply with high-level information. After review, receive a seller-identified scope and service contract. Read and accept that exact document before Stripe Checkout. Manage renewal and cancellation in the billing portal.

Do not send passwords, private keys, customer records or vulnerability evidence through this form. Confidential materials use an agreed private channel.

Privacy · Service terms overview