Pricing
Custom quotation,after scope review
Standard and Extended engagements are quoted after ScnFix reviews the scope. The quotation is in INR or USD. This page does not publish a price.
Custom quotation
Standard Web & API Pentest
Startups and established businesses that need independent testing evidence for an enterprise security review, a procurement request, or customer assurance.
- ✓One web application and its API.
- ✓One agreed testing environment.
- ✓Up to five tester-days. The quotation states how those days are staffed. Five tester-days are not a promise of five calendar days.
- ✓Human-led testing. Security tools support the tester. A tool alert is not published as a confirmed finding.
- ✓Authenticated and role-based testing when you provide test accounts.
- ✓A written scope and signed rules of engagement.
- ✓Non-destructive testing unless the rules name a specific exception.
- ✓Human-reviewed findings, with severity, impact, evidence, and remediation guidance.
- ✓A professional PDF report.
- ✓One retest of findings from that report after you remediate them, inside the retest window on the quotation.
- ✓A testing completion letter, issued only after the report is released, for sharing with a customer's security team.
Custom quotation
Extended Security Assessment
A wider scope than one application and one environment. Every Extended engagement has its own written scope.
- ✓More than one web application, or more than one API, when each is named.
- ✓Additional environments.
- ✓Additional user roles.
- ✓Deeper business-logic testing where the scope describes it.
- ✓Additional testing days beyond the Standard allowance.
- ✓A wider retest arrangement, written on the quotation.
- ✓Other technical requirements only when ScnFix agrees to them in the scope. Unsupported work is not offered.
Currency options are INR and USD. Tax is stated on the quotation. It is not calculated on this website.
How you receive a quote
- 01Submit the request with the application URL, API type, roles, environment, and the reason for the test.
- 02ScnFix reviews that scope and writes back if a target, role, or boundary is missing.
- 03You receive a written quotation in INR or USD, before anyone asks you to sign the rules of engagement.
- 04The quotation names the targets, scope boundaries, test accounts, methods, duration, deliverables, retest eligibility, and the agreed schedule.
- 05You accept the quotation and the rules of engagement. Testing starts after that written authorisation, not when the form is sent.
The agreed delivery schedule is a line on that quotation. A late test account or a scope change is written into a revised schedule. This page does not promise a fixed number of days.
Ready to request a test?
Share the application and the reason. We reply in writing. No call is required.