pricing
Testing priced to your scope
Most of our work is scoped to your environment and quoted as a single fixed price up front, carried out by an experienced consultant, so you know the cost before any work begins. For smaller organisations and standard tests, we also publish the fixed-price list below.
A price list for smaller organisations
Penetration testing can be expensive, and the cost often puts it out of reach for smaller teams. The prices below are our fixed rates for smaller organisations and standard, well-scoped tests, kept affordable so cost is less of a barrier to getting properly tested. You see the cost up front and can budget without surprises.
For a plain-English guide to what penetration testing costs in New Zealand and what drives the price, see our penetration testing cost guide.
| Service | Scope | Fixed price |
|---|---|---|
| Web Application Penetration Test Single app, up to 5 functional pages, 2 user roles | Single app, up to 5 functional pages, 2 user roles | $4,800 |
| API Penetration Test Up to 25 endpoints, 1 auth method, 2 user roles | Up to 25 endpoints, 1 auth method, 2 user roles | $4,600 |
| Mobile Application Security Assessment Single app (Android/iOS), 2 user roles, 20 backend functions | Single app (Android/iOS), 2 user roles, 20 backend functions | $6,200 |
| External Network Penetration Test Up to 5 public-facing IPs / services | Up to 5 public-facing IPs / services | $3,100 |
| Microsoft 365 Secure Configuration Review One tenant, maximum 30 users, 1 Exchange domain | One tenant, maximum 30 users, 1 Exchange domain | $4,600 |
| Internal Network Penetration Test Up to 50 hosts, 1 Windows domain | Up to 50 hosts, 1 Windows domain | $6,500 |
| Cloud Secure Configuration Review One account, up to 5 primary services | One account, up to 5 primary services | $4,600 |
| Device Secure Configuration Review Single device (switch, router, firewall, computer, or laptop) | Single device (switch, router, firewall, computer, or laptop) | $3,100 |
| Internal Network Vulnerability Scan Up to 50 active hosts via VPN | Up to 50 active hosts via VPN | $3,500 |
| External Network Vulnerability Scan Up to 5 IP addresses | Up to 5 IP addresses | $1,400 |
| Cloud Attack Surface Assessment Single cloud environment, up to 10 internet-facing assets | Single cloud environment, up to 10 internet-facing assets | $4,600 |
| Hardware Security Assessment One device with Tier 1 testing only | One device with Tier 1 testing only | $6,800 |
Prices are in NZD and cover the scope described. For larger or more complex work, send us the details and we will quote on scope.
Want a price for your exact scope?
Send us the details and we will come back with a fixed quote.
Request a quote