Pricing and Packages

Pricing for Penetration Testing and Vulnerability Assessment

Three audit packages, three continuous monitoring tiers. One steadfast principle: guaranteed flat rates without hidden change orders, verification re-test included wherever certification is issued. All fees excl. VAT.

Attack Surface Check

For an initial outside-in overview: municipalities, SMEs, and practices seeking to discover their immediate exposure.

CHF1,490

one-time flat fee · 3 business days · fully creditable toward Threat Analysis within 90 days

  • Full inventory of public internet assets: domains, IPs, active ports, and service banners
  • Correlation with actively exploited vulnerabilities (CISA KEV catalog)
  • Darknet screening for compromised company credentials and passwords
  • Email security review (SPF, DKIM, DMARC) and TLS encryption analysis
  • Executive summary report with prioritized remediation recommendations

Excludes verification re-test and certificate

Request Check

Threat Analysis

For organizations requiring robust compliance proof: hospitals, public bodies, law firms, and data-sensitive enterprises.

CHF2,800

guaranteed flat rate · 5 to 10 business days · per organization or cohesive external perimeter

  • All twelve comprehensive audit domains, including web applications (OWASP Top 10) and APIs
  • AI-assisted reconnaissance with every finding manually verified by certified specialists
  • Actionable remediation dossier with code/config guidance, reviewed with your IT team
  • Consulting support during the 30-day remediation window
  • Inclusive verification audit (re-test) until all critical and high findings are resolved
  • Official Suisse IT Security Certificate, valid for 12 months with online registry verification
Request Threat Analysis

Internal Threat Analysis

For organizations with on-premise networks, line-of-business software, and directory services: hospitals, municipalities, industrial plants.

CHF7,800

starting from, custom flat fee · 10 to 15 business days · fixed proposal after scoping session

  • Everything in the External Threat Analysis
  • Internal network audit: segmentation, Active Directory, permissions, and vendor maintenance tunnels
  • Line-of-business applications and clinical information systems (EHR/HIS)
  • Microsoft 365 or Google Workspace tenant security posture review
  • Backup resiliency and disaster recovery evaluation
  • Two verification re-test cycles and extended scope certificate
Schedule Scoping Call