Cyber security a small business can afford

Large security firms are often too expensive and too complex for a small company. We do the same work as clearly scoped packages, with the price visible up front. If you have no one to fix what we find, we fix it ourselves.

Security services

Security services priced for small companies, done by a working security engineer.

Security health check

A quick, affordable look at a small company's most common security gaps, with a plan to fix them.

Includes
  • Domain and e-mail: SPF, DKIM and DMARC against spoofed mail
  • Website HTTPS and security headers
  • Microsoft 365 or Google Workspace settings
  • Passwords and two-factor sign-in
  • Backups: can you restore, and how fast
  • Written report and a 45-minute call

€290

Fixing what we found

If you don't have a developer or IT person of your own, we fix the issues found in the health check or pentest ourselves.

Includes
  • A fixed price based on the report, before work starts
  • Website, domain and e-mail (SPF, DKIM, DMARC), Microsoft 365 or Google Workspace
  • Every fix is checked afterwards
  • Work starts only once you approve

price after review

Website or web shop pentest

We test your site the way an attacker would: within an agreed scope and with your written permission.

Includes
  • Manual testing based on the OWASP Top 10
  • Sign-in, forms, payments and the admin interface
  • Report: findings, risk level and how to fix them
  • A plain-language summary for management

€890

Web application pentest

A deeper test for an application with user accounts: a customer portal, SaaS or internal business app.

Includes
  • Up to 3 user roles
  • Access control (can one customer see another's data)
  • Testing the application's API
  • Report, fix guidance and a results meeting

€1,890

Re-test after fixes

We check that the pentest findings are really fixed.

Includes
  • Every finding tested again
  • Updated report

€190

Compliance gap analysis

Where you stand today against E-ITS, NIS2, ISO 27001 or GDPR, and what needs to be done.

Includes
  • Interviews and document review
  • List of gaps by priority
  • Action plan with prices
  • One standard or set of requirements per package

€690

Ongoing security support

Care for your website and ongoing security support for your company. Unused hours do not carry over.

Security partner

A part-time security specialist for your company: regular checks, advice, and help when something happens.

Includes
  • Monthly check of domain, e-mail and website
  • Advice on security questions and choosing suppliers
  • Help during a security incident (business hours)
  • 4 hours per month, extra hours at the hourly rate

€249 per month

How a pentest works

  1. Scope

    We agree what, when and how we test.

  2. Written permission

    We test only with your signed permission. Without it we do nothing.

  3. Testing

    By hand and with tools, without disrupting your day-to-day work.

  4. Report

    Findings by risk level, fix guidance and a summary for management.

  5. Re-test

    If you want, we check that the fixes work.

Requirements in plain language

E-ITS
The Estonian information security standard. Mandatory for the public sector and many of its partners.
NIS2
The EU cyber security directive, which covers many medium-sized companies and their suppliers.
ISO 27001
The international standard for information security management, often requested by larger customers.
GDPR
The General Data Protection Regulation requires appropriate security measures to protect personal data.

Principles

  • We test only with written permission and within the agreed scope.
  • Findings stay between you and us.
  • We don't sell fear: we tell you honestly what really matters.

Start with the free check

The security check shows in a minute how your website and e-mail look to an attacker.

Free security checkGet a quoteCall +372 5192 8421