// security audit

We find the holes in your site before someone else does.

We check your website or app for known vulnerabilities and misconfigurations. You get a report with a risk score and a fix order - not a raw list of warnings from a tool.

from 1,200 PLN net Ask about scope See a sample report

When it helps

You put a website, shop or panel on the internet and you are not sure what is visible from outside. Features and integrations piled up, the configuration grew over years, and no one looked at the whole picture at once. An audit shows what is really reachable for someone looking for a way in - and what to fix first.

How we do it

Scope & consent

We agree the list of addresses and domains to check and sign the consent. The scanner never goes outside that list.

Scan

We run a set of established tools: reconnaissance, server headers and configuration, TLS, known vulnerabilities (CVEs), component versions. Non-intrusive by default.

Analysis

We weed out false positives, weight findings by CVSS and set the fix order. A person does this part, not the tool.

Report

We turn the result into a report in Polish or English: a section for the board and a technical section with concrete recommendations.

What you get

A report in HTML and PDF (and Markdown), in Polish or English.
A risk score 0-100 and a summary written for management.
Every finding with a CVSS weight and an OWASP/CWE tag.
Concrete fix recommendations, ordered by importance.
A "GOOD" status for defences that work correctly.
A screenshot gallery and raw tool logs - for your own verification.

Scope & terms

From you: a list of hosts, domains or IP addresses to check, and a written statement that you may commission the test.
Non-intrusive by default. On request we add an active mode: a controlled test of whether the server locks out logins after a run of failed attempts. A working lockout is a point in your favour.
Retest after fixes: we come back and confirm what has been closed.

Where we draw the line

The audit is based on a scan with established tools plus our analysis. It is not the same as a full manual pentest that tests application logic - if you need that, we will say so and point you to the right scope.
We only check addresses from the agreed list. We do not change or delete your data.

Price

Report only

The scan result in a clear report, without extended analysis.

from 1,200 PLN

Report with analysis & recommendations

With interpretation, priorities, recommendations and support with the fixes.

from 2,500 PLN

// net prices; retest 30-50% of the base price; the final quote depends on scope - a single site is priced differently from an app with subdomains

Let's see what's visible from outside

Tell us what to check. We'll reply with a proposed scope and a quote.

Ask about scope