Dedicated pentest pricing is defined after technical review and presented in a quote before payment.
Pentest engagements are currently available only in Brazil.
The review considers the product's flows, access profiles, business rules, states, integrations, and dependencies. The result is a classification into three sizes.
Focused products with few user paths and limited variation across profiles and states.
Products where permissions, states, integrations, or rules create paths that must be assessed together.
Broad platforms with several modules, services, profiles, or relationships across environments and codebases.
After selecting the type, we manually assign a decimal score. It estimates the work required and the complexity of the assessment. The first digit indicates the category; the decimal portion represents variation within that size.
A 1.9 score ends the Type 1 range. A 2.0 score starts Type 2, which uses a different price base because it covers a broader set of flows and technical relationships.
The amount varies proportionally from R$600 to R$1,000 and is rounded to the nearest R$10.
R$600 + ((index − 1.0) ÷ 0.9 × R$400)Index 1.9: R$1,000, the maximum amount in this range.
The R$2,300 base is multiplied by the index minus 1.0.
R$2,300 × (index − 1.0)Index 2.9: R$4,370, the maximum amount in this range.
The R$6,000 base is multiplied by the index minus 2.0.
R$6,000 × (index − 2.0)Index 3.9: R$11,400, the maximum amount in this range.
Applied to Type 1 before the pentest begins.
Applied to Types 2 and 3: 40% deposit and 60% on final report delivery.
In this example, technical review assigns a 2.5 index. The R$2,300 base is multiplied by 1.5, resulting in a R$3,450 quote paid in two stages.
Initial payment confirms scheduling. The final balance is due when the report is ready for release.
Type, index, total price, payment terms, estimated start date, and execution timeline. The quote is valid for 3 calendar days. Payment confirms the estimate for the next business day, with the possibility of an earlier start when capacity is available.
Cards are processed by Stripe and Pix by Mercado Pago. Before the final report is delivered, you may request cancellation and a refund. Any difficulty is handled directly with us, transparently and according to work progress, deliveries already made, and rights provided by law.
Describe what may be tested and the applicable rules. You can review everything before submission.