Code & AppSec · S-CODE-6
Check every endpoint for broken access control.
Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.
S-CODE-6
Every endpoint, checked
Pricing
Pay the deposit to start. Pay the final balance before handoff.
$1,500
Hours. 12 hours
Scope. ≤15 endpoints, 1 auth scheme
Deliverables
Turnaround. 5 business days
Balance is due before handoff.
Terms cover this engagement. A statement of work controls the scope.
Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.
$2,900
Hours. 23 hours
Scope. ≤50 endpoints, ≤2 roles models
Deliverables
Turnaround. 8 business days
Balance is due before handoff.
Terms cover this engagement. A statement of work controls the scope.
Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.
$4,300
Hours. 39 hours
Scope. ≤120 endpoints, multi-tenant
Deliverables
Turnaround. 12 business days
Balance is due before handoff.
Terms cover this engagement. A statement of work controls the scope.
Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.
Retest included: Starter, one retest of Critical and High findings within 30 days; Standard, one retest of all findings within 45 days; Advanced, two retests within 60 days. Another round is the Extra Retest add-on.
Scope
OWASP API Security Top 10 2023 (API1 BOLA … API10); CWE; ASVS 5.0 API sections; NIST CSF 2.0 PR.AA.
Authz matrix covers 100% of in-scope endpoints; each finding maps to an API Top 10 2023 ID.
Scope. Not a penetration test, audit, or certification; no guarantee of breach prevention; written authorization required before any active testing.
Email [email protected] with the system you want reviewed. We will point at a tier in this catalog, or tell you if the work is outside it.