Enterprise · On request
Security architecture review. For groups and platforms.
For companies with many applications, teams or sites, we plan the audit individually. We review architecture, infrastructure and development process, model threats and support you with recurring audits and a dedicated contact.
- Price
- On request
- Delivery
- individual
- Access
- individual
- Result
- Report and security roadmap
What we check
- Multiple applications, teams and sites
- Architecture review and threat modelling
- Cloud, container and CI/CD configuration
- NIS2 and CRA readiness with an action plan
- Dedicated contact and recurring audits
- Workshops with your developers
How it works
Methodology- 01
Scoping
Together we define applications, goals and framework.
- 02
Review and workshops
Architecture, threat modelling and configuration with your teams.
- 03
Audits and roadmap
Audits of the critical applications and a prioritised roadmap.
- 04
Ongoing support
Dedicated contact and recurring audits.
What you get
- Security roadmap for your portfolio
- Threat model of critical systems
- NIS2 and CRA readiness mapping
- Recurring audits on schedule
Compared
| Security checkfree | App audit€490 | Code audit€890 | Full audit€1,690 | EnterpriseOn request | |
|---|---|---|---|---|---|
| What is tested | |||||
| TLS, security headers, cookies | included | included | partly | included | included |
| Login, sessions, rate limits | not included | included | included | included | included |
| Access rights: can user A see user B’s data? | not included | included | partly | included | included |
| Injection (SQL, XSS, SSRF) | not included | partly | included | included | included |
| Secrets and keys | partly | partly | included | included | included |
| Supply chain, Docker, CI/CD | not included | not included | included | included | included |
| What you get | |||||
| Grade and number of findings | included | included | included | included | included |
| Report with a prioritised action plan | not included | included | included | included | included |
| CVSS 3.1 ratings | not included | included | included | included | included |
| Debrief and re-check | not included | not included | not included | included | included |
| Framework | |||||
| Access | URL and email address | Address + 2 test accounts | Read access to the code | URL, test accounts and code | individual |
| Delivery | usually within 2 hours on working days | 1 working day | 2 working days | 4 working days | individual |
Frequently asked questions
Who is the enterprise review for?
For companies with several applications, their own development teams or duties such as NIS2.
How is the price calculated?
By scope and duration. After scoping you receive a fixed-price offer.
Do you work with our teams?
Yes. Workshops with your developers are a core part.