Full audit · €1,690 excl. VAT
The full audit. Every finding proven.
The full audit combines the app audit and the code audit. What we find in the code, we prove in the running application. An expert reviews every finding before it goes into the report. The result is solid proof for customers, investors and regulators.
- Price
- €1,690 excl. VAT
- Delivery
- 4 working days
- Access
- URL, test accounts and code
- Result
- Report of about 25–30 pages
All prices net, plus VAT. Businesses only. Our terms and conditions apply.
What we check
- App and code audit combined
- Code findings proven in the running app
- Every finding checked by an expert
- Report of about 25–30 pages with CVSS ratings
- Debrief and re-check after your fixes
12,640 signals → 27 proven findings (example)
How it works
Methodology- 01
Intro call
15 minutes on scope, access and timeline. NDA and DPA first.
- 02
App and code
Logged-in tests and code analysis run in parallel, findings confirm each other.
- 03
Expert review
An experienced developer verifies every finding and rates it with CVSS 3.1.
- 04
Debrief and re-check
We walk you through the report and re-check your fixes.
What you get
View sample report (PDF)- Report of about 25–30 pages with management summary
- Every finding proven and rated
- Action plan: now, next sprint, backlog
- Debrief and re-check after your fixes
Compared
| Security checkfree | App audit€490 | Code audit€890 | Full audit€1,690 | EnterpriseOn request | |
|---|---|---|---|---|---|
| What is tested | |||||
| TLS, security headers, cookies | included | included | partly | included | included |
| Login, sessions, rate limits | not included | included | included | included | included |
| Access rights: can user A see user B’s data? | not included | included | partly | included | included |
| Injection (SQL, XSS, SSRF) | not included | partly | included | included | included |
| Secrets and keys | partly | partly | included | included | included |
| Supply chain, Docker, CI/CD | not included | not included | included | included | included |
| What you get | |||||
| Grade and number of findings | included | included | included | included | included |
| Report with a prioritised action plan | not included | included | included | included | included |
| CVSS 3.1 ratings | not included | included | included | included | included |
| Debrief and re-check | not included | not included | not included | included | included |
| Framework | |||||
| Access | URL and email address | Address + 2 test accounts | Read access to the code | URL, test accounts and code | individual |
| Delivery | usually within 2 hours on working days | 1 working day | 2 working days | 4 working days | individual |
Frequently asked questions
How is it different from app plus code audit?
Findings confirm each other, an expert reviews each one, and debrief and re-check are included.
Is the report suitable for NIS2 or due diligence?
It documents method, scope, findings and measures and works as proof. It does not replace a certification.
When does the delivery time start?
Once payment has arrived and code, access and approval are complete. With the Express option you receive the report within 24 hours on working days.