VORVEXAPEX
Penetration testing investment

The price of a penetration test follows the risk that needs to be assessed.

Understand what drives the price of a penetration test: assets, user roles, complexity, depth, timeline, reporting and retesting.

Transparent scope Estimated timeline No generic packages
Illustrative scene of specialists working together on a security assessment
Guided assessmentSpecialists + Apex technology
Illustrative image
When this matters

The number of URLs alone does not define the effort.

Authenticated flows, user roles, APIs, architecture, restrictions and depth all have a direct effect on execution and on reviewing the evidence.

01

Type and number of assets

02

Roles and authenticated areas

03

Complexity of business rules

04

Timeline, deliverables and retesting

What makes up the scope

Factors that change the investment.

A responsible estimate requires a minimum of information about the environment.

01

Surface

Number and type of applications, APIs, domains, addresses or networks.

02

Depth

Critical flows, integrations, authenticated areas and specific scenarios.

03

Operation

Windows, restrictions, access, environments and how closely the work is tracked.

04

Delivery

Reports, presentation, additional evidence and how many retest cycles are included.

Inside the delivery

See how this work takes shape.

From technical alignment to delivery, the work has to leave context, evidence and next steps visible to everyone involved.

Team conducting an operational stage of Penetration testing investment
Guided executionSpecialists keep context, records and communication throughout the work.
Illustrative analysis of the technical surface and paths for Penetration testing investment
ValidationThe technical surface is analyzed within the authorized scope.
Illustrative executive briefing for Penetration testing investment
BriefingRisk is explained to both decision-makers and remediation teams.
Illustrative business conversation related to Penetration testing investment
Next decisionEvidence, impact and priority reach the same conversation.
01 / 04
Illustrative images
Process

How we arrive at a proposal.

The commercial assessment sets out to close gaps before estimating timeline and investment.

01

Context gathering

You tell us the assets, objective, roles, technology and timeline.

02

Scope analysis

Vorvex identifies dependencies, open questions and relevant restrictions.

03

Proposal

The document lays out coverage, exclusions, timeline, deliverables and investment.

Illustrative scene of a scope definition meeting
Context comes first.Scope, limits and owners are defined before any execution.
Deliverables

Compare proposals by scope, not just by price.

Two proposals at different prices can represent completely different levels of coverage.

Check

Assets and flows included

Confirm that authenticated areas, APIs and relevant roles appear explicitly.

Check

Method and validation

Understand whether it is automation only, or specialist analysis and validation.

Check

Deliverables and retesting

Compare the report, presentation, evidence and the terms for validating fixes.

Frequently asked questions

Straight answers to help you plan the assessment.

If your question isn't here, talk to the team directly.

Ask on WhatsApp
Is there a fixed price for a penetration test?+

There is no single responsible price for every environment. The investment varies with surface, complexity, depth, restrictions and deliverables.

Can we start with a smaller scope?+

Yes. We can prioritize the highest-risk assets or flows, as long as the limitations are stated clearly in the proposal and in the report.

Is retesting included?+

The proposal states whether retesting is included, how many cycles, the window to request it and the conditions for running it.

Next step

Get an estimate based on your environment.

The form collects what we need to put together a straightforward proposal.

Assess my scope Talk on WhatsAppInitial conversation, no commitment
Talk on WhatsApp

Ready to assess your company's risk?