Services

Break It Before Someone Else Does.

Fixed-price security testing for LLM apps and web applications. Hands-on, attacker-style, with a report your developers can act on the same day.

  • Free 20-30 min scoping call
  • Fixed price, agreed upfront
  • Free retest within 30 days
Offers

Pick What You Need to Test.

Launch pricing. Every project is fixed price, scoped together before you commit.

01

LLM Application Security Assessment

Find out how your chatbot or AI feature can be manipulated before a user does.

  • Prompt injection & jailbreaks
  • System prompt and data leakage
  • RAG poisoning & token abuse

For Startups and SMEs shipping a chatbot or AI feature.

From€300· 1-3 weeks
02

Full Web Application Assessment

A manual, attacker-style test of your whole web app, front to back.

  • Authentication & sessions
  • Access control (IDOR, privilege escalation)
  • Business logic & injection

For SaaS, e-commerce and platforms with user accounts.

From€300· 1-3 weeks
How it works

From First Call to Fixed, in Five Steps.

  1. 01Free · 20-30 min

    Free scoping call

    20-30 min to understand what you run and what worries you. You leave with a clear scope and a fixed price.

  2. 0250% upfront

    Contract and authorization

    Written authorization to test, a test window and an emergency contact. 50% to start.

  3. 031-3 weeks

    Testing

    Hands-on, attacker-style testing against the agreed scope. Anything critical is flagged to you right away.

  4. 0450% on delivery

    Report and walkthrough

    A written report plus a call to go through it. The remaining 50% is due on delivery.

  5. 05Free · within 30 days

    Free retest

    Fix the critical and high findings and I verify them within 30 days, included in the price.

FAQ

Before You Ask.

What people usually want to know before booking a test. Anything else, just ask.

Ask a question
How is pricing set?

Every project is fixed price. Scope and price are agreed on the free scoping call, before you commit to anything, so there are no surprises on the invoice. Payment is 50% on acceptance and 50% on delivery of the report.

Do you need written permission to test?

Yes, always. Every engagement starts with a contract and a written authorization that defines the scope, the test window and an emergency contact.

What does the free retest cover?

Once you have fixed the critical and high findings, I re-test them to confirm they are closed. It is included in the price and available for 30 days after delivery.

Is the retainer required?

No. The retainer is optional and only makes sense if you ship often: it covers retesting each new release so security keeps up with the product.

I've never had a security test. Where do I start?

If you ship a chatbot or AI feature, start with the LLM Application Security Assessment: it is the smallest and quickest engagement. Otherwise, the Full Web Application Assessment covers your app and the APIs behind it.

What do I receive at the end?

A written report with a management summary for decision-makers and technical detail for developers. Every finding comes with severity, a reproducible proof of concept, the impact and how to fix it, plus a walkthrough call.

What if you find nothing serious?

You still get the full report, including exactly what was tested and what was covered, which is useful evidence for customers and audits.

Next step

Not Sure Which One Fits?

Tell me what you're building. In a free 20-30 min call I'll suggest the right scope and give you a fixed price, with no obligation.

Book a free scoping call

Usually answers within two working days