We Believe In Transparent Pricing
Customer trust is top most priority & we keep our customers happy by giving most comprehensive security solutions at the best affordable price.
Essentials
$1299
Organisation Size
- Upto 25 IPs
Professional
$1899
Organisation Size
Upto 50 IPs
Enterprise
$3499
Organisation Size
Upto 100 IPs
Ultimate
$6499
Organisation Size
- Upto 200 IPs
Essentials
Professional
Enterprise
Ultimate
Scope
Essentials
Professional
Enterprise
Ultimate
Internal & External Network Scan
Non-credentialed scan
Credentialed scan*
Automated Penetration Testing
2 experts
2+ experts
2+ experts
3+ experts
Zero False Positive
OSCP Certfied Tester
SLA
3-5 Days
5 -8 Days
8-12 Days
12-15 Days
VULNERABILITIES SCAN
Essentials
Professional
Enterprise
Ultimate
Coverage of 50K+ Vulnerabilities
Host Operating System (OS)
Database
Network (Router / Switch / Access Point etc.)
Security (Firewall / Proxy / Email Gateway etc.)
Services (FTP, DHCP, DNS, NTP, SSH, SNMP etc.)
Host Discovery
Network Discovery
Service Discovery
Unpatched Systems
Weak Communication Protocols
Backdoors
Denial of Service
Brute force attacks
CWE/SANS top 25
Essentials
Professional
Enterprise
Ultimate
CWE-22: Path Traversal
CWE-89: SQL Injection
CWE-78: Command injection
CWE-89: Blind SQL Injection
CWE-79: Stored XSS
CWE-90: LDAP Injection
CWE-79: Reflected XSS
CWE-91: XML Injection
CWE-79: DOM-Based XSS
CWE-93: CRLF Injection
CWE-94: Code Injection
CWE-113: HTTP Response splitting
CWE-94: AJAX Injection
CWE-200: Information Exposure
CWE-94: JSON Injection
CWE-255: Credentials Management
CWE-97: SSI injection
CWE-284: Improper Access Control
CWE-98: Remote/Local PHP File Inclusion
CWE-287: Authentication Bypass
CWE-345: Insufficient Verification of Data Authenticity
CWE-352: Cross-site request forgery (CSRF)
CWE-384: Session Fixation
CWE-400: Resource Exhaustion
CWE-434: Arbitrary File Upload
CWE-502: Deserialization of Untrusted Data
CWE-521: Weak Password Requirements
CWE-601: Open Redirect
CWE-611: Improper Restriction of XML External Entity Reference (XXE)
CWE-613: Insufficient Session Expiration
CWE-643: XPath Injection
CWE-804: Guessable CAPTCHA
CWE-799: Improper Control of Interaction Frequency
CWE-918: Server-Side Request Forgery (SSRF)
CWE-942: Overly permissive Cross-domain Whitelist
PCI DSS 6.5.1-6.5.11 Full Coverage
Essentials
Professional
Enterprise
Ultimate
Injection Flaws
Many other “High” Risk Vulnerabilities
Buffer Overflows
Cross-Site Scripting (XSS)
Insecure Cryptographic Storage
Improper Access Control
Insecure Communications
Cross-Site Request Forgery (CSRF)
Improper Error Handling
Broken Authentication and Session Management
Reporting
Essentials
Professional
Enterprise
Ultimate
Reproduction Steps
Web, PDF, JSON, XML and CSV Formats
Remediation Guidelines
Compliance Report
CVE, CWE and CVSSv3 Scores
Access to Security Consultant
Essentials
Professional
Enterprise
Ultimate
24/7 Access to Security Consultant