The menu · flat per-engagement pricing · Bloomington, IN

Four kinds of engagement — and exactly what each one costs.

No “contact us for pricing” runaround. Here's every service we run, what's in it, and a real number. Big or weird scope gets quoted after the scoping call — we'll say so when that applies.

Book a scoping call Read the fine print

Jump to a service

  1. Penetration testing$4,650+
  2. Cloud & security audit$5,200+
  3. SOC 2 / HIPAA readiness$6,800+
  4. Phishing campaign$2,900+
01

Penetration testing

$4,650 per target, by hand

We try to actually break in — external perimeter, internal network, or a web app — the way a real attacker would, not the way a scanner pretends to. Then we walk you through every step of how we did it, so it's obvious why it matters and what to fix first.

What's in it

  • Manual exploitation, not just an automated scan dump
  • Findings ranked by what an attacker hits first
  • A live walkthrough with your engineers
  • 30-day re-test on anything you patch

Who it's for

  • A SaaS team whose customer just demanded a pen test report
  • Anyone who's never had their perimeter tested by a human
  • Teams who want proof, not a 90-page false-positive PDF
A penetration tester's dual-monitor workstation: terminal output and a web app under test, with a hardware key and a hand-drawn network diagram
Scope a pen test →
02

Cloud & security audit

$5,200 per environment

The quiet misconfigurations — an over-permissioned IAM role, a public bucket, backups nobody's ever tested restoring — are what leave a door propped open at 2am. We review your AWS, GCP, or Azure setup plus identity, network segmentation, logging, and backups, and hand you a prioritised list of what to tighten.

What we review

  • IAM & identity: who can do what, and who shouldn't
  • Network exposure, security groups & segmentation
  • Logging, alerting & whether anyone would notice a breach
  • Backups — and whether a restore actually works

What you get

  • A ranked fix list — critical now, fine for next quarter
  • Concrete config changes, not vague “harden this”
  • A follow-up call once your team starts patching
Scope an audit →
03

SOC 2 & HIPAA readiness

$6,800 per framework

A gap assessment before your auditor shows up — so there are no surprises in the room that costs you by the hour. We tell you what's missing, in what order to fix it, and what's genuinely fine to leave. No scare tactics, no selling you controls you don't need.

SOC 2 Type II

  • Gap assessment against the Trust Services Criteria
  • An evidence pack you can hand straight to the auditor
  • Policy templates your team can adapt, not boilerplate bloat

HIPAA

  • Security Rule gap review + risk analysis
  • Where ePHI actually lives — and who can touch it
  • A remediation plan your own team can run

Straight talk: we get you ready for the audit. We don't issue the SOC 2 report itself — that's the licensed CPA firm's job, and we'll tell you honestly which ones play fair.

Scope readiness →
04

Phishing & social engineering

$2,900 per campaign

A controlled campaign so your team learns who clicks from us — not from a real breach that costs you customers. We send realistic lures, measure what happens, and debrief in plain language. No public shaming, no leaderboard of who failed.

What's in it

  • Lures written for your actual industry, not generic spam
  • Click, credential-entry & report-rate tracking
  • A 30-minute team debrief, no names on a wall

Honest expectation

  • Someone will click. The point is building the reflex to report
  • Best value bundled with a pen test, not as a one-off scare
Scope a campaign →
STRAIGHT TALK · NO UPSELL · STRAIGHT TALK · ✕

The quiet part, out loud: what we won't sell you.

No open-ended retainers

We bill per engagement with a flat number agreed up front. If you want quarterly testing, great — but you'll see each one priced, not a vague monthly charge that drifts.

No scan-and-forward

We won't run a tool, slap our logo on the export, and email you 400 “findings” that are 390 false positives. Every issue in your report, a human verified by hand.

No fear-based upsell

If a cheaper engagement answers your actual question, we'll say so on the call. If you don't need us yet, we'll tell you that too — before you've signed anything.

À la carte

Add-ons, priced the same way — a number, not a “call us.”

Bolt any of these onto an engagement, or book them on their own. Larger or unusual scope is quoted after the free scoping call.

Extra re-test window Beyond the 30 days included — we re-verify fixes for another 60 days. $950
Mobile app test iOS or Android binary + API, tested by hand alongside your web app. $3,400
Executive summary deck A board- or customer-facing version of the findings, no jargon. $600
Vendor security questionnaire help We fill out those painful customer security questionnaires with you. $1,250
On-site testing (Bloomington area) Internal network testing from inside your office, in person. $1,800

Everything here is invoiced per engagement — card or bank transfer. No subscriptions, no auto-renew.

Before you ask

The questions people actually email us.

Can't find yours? Call and ask the person who'd run the test — not a sales rep.

Call (812) 606-8926
Why a flat price instead of hourly?

Because you shouldn't be billed more for us being slow. We scope the work on a free call, quote one number, and that's what you pay — even if a finding turns out to be a rabbit hole. The only thing that changes the price is you changing the scope.

How long does an engagement take?

Ten business days from kickoff to the final written report for a standard engagement — not six weeks of silence. If we find something critical mid-test, you hear about it the same day, not buried on page 40 later.

Will testing take our systems down?

Almost never, and never by accident. We agree rules of engagement in writing first — dates, targets, and what's strictly off-limits. Anything genuinely risky (like aggressive denial-of-service testing) only happens if you explicitly ask for it, on a system you choose.

Can you give us the SOC 2 report itself?

No — and be wary of anyone who says they can do both. The actual report has to come from a licensed CPA firm. We get you ready for their audit and hand you an evidence pack, which is the part most teams get stuck on.

We're tiny. Are we too small for this?

Small and mid-sized businesses are exactly who we're built for. If you're a two-person startup whose first enterprise customer just demanded a pen test, that's a very normal call for us. If you genuinely don't need a test yet, we'll tell you on the call for free.

Do you work outside Bloomington?

Most of our work is remote, so where you're based rarely matters. On-site internal testing is a local add-on for the Bloomington area; farther afield, we'll quote travel honestly on the call rather than padding it into the price.

Based in Bloomington, IN

Not sure which one you need? That's what the call is for.

Tell us what you're running and what triggered this — a customer demand, a close call, a gut feeling. Twenty free minutes and you'll leave with a recommendation and a number.

Book a scoping call Email the team
Book a call Call us