Fixed price. Published rubric. Quoted in two minutes.
No custom-quoted SOWs, no discovery-call gauntlet, no "prices on request." Pick your assets, size them, and see the exact number your finance team needs to approve.
Four inputs. One fixed number.
Your quote is base rate × scope size × auth depth + compliance increment — applied automatically in the order form. Here's what what each input means.
Web app, REST/GraphQL API, mobile (iOS or Android), cloud environment, external network, or internal network. Each surface has its own testing depth and time requirement.
S through XL based on endpoint count, business-logic complexity, and number of distinct flows. The scoping form walks you through the questions — no estimation needed from your side.
The number of distinct roles and permission levels in scope. A single-role app is simpler than a multi-tenant platform with admin, billing, and API consumers.
SOC 2, ISO 27001, PCI DSS, and HIPAA engagements include framework-specific evidence packs and a fixed increment. Other scopes do not carry this increment.
The order form asks you four questions — asset type, size, roles, and framework — and shows your fixed price at the end. Takes two minutes.
SecureBlock vs. traditional consultancies vs. scanner-only vendors.
| Capability | SecureBlock | Scanner-only | Traditional firm |
|---|---|---|---|
| Fixed price, published rubric | |||
| Instant online quote | |||
| Kickoff within 48 hours | |||
| Manual testing by OSCP/CREST | |||
| Live findings in-platform | |||
| Direct chat with tester | |||
| Free retest within 90 days | sometimes | ||
| Framework-specific evidence packs | |||
| Multi-week sales cycle | |||
| Scope-creep clauses in SOW |
No add-ons. No premium report tier.
Questions buyers actually ask.
Still unsure? Ask an engineer in chat — not a sales rep.
Ready to see your number?
Two minutes, four questions, one fixed price at the end.