Know the scope and cost before we begin.

Review starting prices for common penetration testing scopes and our Cloud & DevOps Consulting options. Security consulting is quoted around a clear set of outcomes and deliverables.

01

Cloud & DevOps Consulting

We design and build cloud and on-premises infrastructure, improve existing environments, carry out migrations and help reduce cloud costs. Choose support for a defined project or ongoing senior engineering capacity. Explore our cloud and DevOps services for the work we cover.

On-demand engineering support

Bring in senior help when you need it

Senior engineering for focused reviews, new cloud or on-premises builds, redesigns, cleanup and cost optimisation. We also deliver full migrations between clouds, from on-premises to cloud, and from cloud to on-premises, with scope, duration and fees agreed for each engagement.

Daily rate
From SGD 1,000/day
Contact Us
Ongoing platform support

Add consistent engineering capacity

Retain an engineer from quarter-time through to full-time, working on-site with your team in Singapore. Use that capacity to build and improve your cloud or on-premises infrastructure, deliver migrations, reduce cloud costs, and support deployments and day-to-day operations.

Monthly retainer
1/4 to full-time
Contact Us
02

Penetration Testing & Vulnerability Assessments

Choose a target, scope, and access model to estimate your penetration testing cost. Final pricing depends on the workflows, user roles, connected systems, and testing depth agreed for your assessment. Explore our penetration testing service for coverage and engagement details.

Startup package

Mobile application and API security test

Built for startups preparing for a launch, customer security review, or their first independent assessment. The package includes:

  • Pentest of one iOS or Android application binary
  • Pentest of one documented REST API with up to 25 endpoints
  • 10 hours of consultation to use for codebase, cloud, or IT security review

Mobile testing combines static and dynamic application security testing (SAST + DAST). Initial and final reports, a findings walkthrough, and one retest of the original findings within 60 days are included.

Fixed package price
SGD 10,000

The price assumes a grey-box assessment with test accounts, API documentation, and a suitable test environment.

Contact Us

Configure a different assessment

Choose the target, scope, and access model to see a starting price. For an accurate quote, share your key workflows, user roles, API documentation, and systems in scope. We will agree the test environment, access requirements, and any production restrictions before testing.

What are we testing?

A workflow is a user journey, such as signing up, checking out, or approving a request. Different roles and tenant boundaries add permission checks; page count alone does not define the scope.

For pricing, one endpoint means one documented route and HTTP method: GET /orders and POST /orders count separately. Include the roles, permissions, and connected services that those endpoints expose.

Mobile application testing includes static and dynamic application security testing (SAST + DAST). The number of app binaries, shared codebases, backend endpoints, and platform-specific controls determines the scope.

Account count is a starting point. Cloud scope also depends on the services, resources, IAM roles, and trust boundaries between environments; two accounts can contain very different amounts of work.

AI and LLM assessments are quoted individually because data access, connected tools, and operational risk vary significantly between systems.

How large is the scope?
What access will be provided?

Provide documentation and test accounts for each agreed role so we can test authorization, business logic, and meaningful attack paths. Agree whether testing will use a representative test environment or approved production access.

Black-box testing approaches the system without prior access or internal context, reflecting the perspective of an external attacker. Discovery and reconnaissance form part of the engagement.

White-box testing includes SAST and architecture testing as standard, using source and design context to investigate security-critical paths.

Prices are shown in SGD for planning purposes and do not constitute a binding offer. Final coverage, timing, fees, and any applicable taxes are confirmed in your written proposal.

03

Security Consulting & Readiness

Readiness reviews, customer and compliance support, and secure development advisory are quoted against a clear set of deliverables.

Pricing
Contact us
Discuss Your Scope