No fixed price lists and no padding. Every engagement is scoped to your environment and objectives, then quoted individually — so you only pay for the work your attack surface actually needs. Tell us what you want tested and we'll send a tailored quote.
Vulnerability assessment & focused penetration test for a single app or a contained external footprint.
Full manual penetration test across application and internal/external network — depth over breadth.
Goal-driven adversary simulation across digital, human and physical vectors against live defences.
Every engagement is scoped and priced individually. Tell us what's in scope and we'll send a tailored quote → nadeen@01-security.com
Every engagement, regardless of tier, ends with artefacts your team and your board can both act on.
We price on effort and risk, not headcount. These are the levers that move a number up or down.
Add these to any tier when the scope calls for it.
A targeted spear-phishing simulation with landing pages, tracking and a click-to-report breakdown.
Available as an add-onOn-site social engineering and physical access testing against your premises and staff.
Available as an add-onManual, developer-led review of a critical codebase alongside dynamic testing.
Available as an add-onQuarterly re-runs against your changing attack surface on a rolling retainer.
Available on requestDeep IAM and configuration audit across AWS, Azure or GCP tenancies.
Available as an add-onArchitecture-level workshop to find design flaws before a line of code ships.
Available as an add-onWe don't improvise coverage. Engagements are structured against the frameworks your auditors and regulators already trust.
There's no fixed price list. Cost depends entirely on your scope — the number of applications, hosts, identities and cloud accounts in play, the depth of testing, and your objectives. We scope every engagement individually and send a tailored quote. Email nadeen@01-security.com with what you'd like tested and we'll take it from there.
Most penetration tests run one to two weeks from kickoff to report, depending on scope. Red team operations typically span three to six weeks. We agree a fixed window before any testing begins.
We test carefully and coordinate closely. Intrusive or denial-of-service style checks are only ever run with explicit written approval, and we can work entirely in agreed windows or against staging where required.
Yes. Every tier includes at least one retest so we can verify your fixes actually close the finding. The report isn't finished until the door is shut.
Senior, certified operators — the same people you meet during scoping. We don't hand your network to juniors, and we don't offshore the testing.
Absolutely. Our reports and attestation letters are built to satisfy SOC 2, ISO 27001, PCI DSS and similar requirements, and we're happy to liaise with your auditor.
Send us a short note about what you want tested and why. We'll run a free scoping call, agree objectives and rules of engagement, and send a tailored quote — usually within a couple of days.
Tell us what's in scope. We'll come back with objectives, a timeline and a quote you can take to your board.
