Express assessment
External review of one domain's perimeter.
- DNS, subdomains and ports
- Certificates and headers
- SPF, DKIM and DMARC
- Report in 5 business days
MXN 8,000 + VAT
Every product in one ViciousByte catalog.Explore
ProjectSecurity
Security audit and pentesting
We test your site, your API or your infrastructure the way an attacker would, with signed authorization, and tell you what to fix and in what order.
Project · 1–3 wk
- Estimated time
- 1–3 weeks
- Price
- From MXN 8,000 + VAT
- Methodologies and tools
- OWASP Top 10 · OWASP API Top 10 · Burp Suite
Audit and pentesting
01 · Overview
Find the flaws before someone else does
The Express assessment reviews what anyone can see from the internet: domains, subdomains, ports, certificates, headers and your email setup. It's fast and tells you where you stand.
The full pentest goes deeper: we test your web app or API against the OWASP Top 10, authentication, sessions and access control, with manual testing on top of automated scans.
We always work under a signed authorization letter and scope. At the end you get an executive report for leadership and a technical one for your team.
We deliver
- Authorization letter and scope
- Executive report
- Technical report with evidence
- Risk-based priorities
- Remediation steps
- Retest included with the pentest
Express assessment
An external review of your perimeter in 5 business days. It isn't a pentest: it's the first step to know how exposed you are.
DNSSubdomainsPortsTLSSPF / DKIM / DMARC
02 · Capabilities
What we review
Perimeter
Subdomains, open ports, exposed services and TLS certificates.
Email
SPF, DKIM and DMARC so nobody can send email pretending to be your domain.
Web application
OWASP Top 10: injection, XSS, insecure configuration and vulnerable components.
API
OWASP API Top 10: object-level authorization, data exposure and rate limits.
Authentication and sessions
Sign-in, password reset, tokens and session hijacking.
Cloud and servers
Permissions, exposed storage, secrets in code and service configuration.
03 · How we work
How we work
We never touch anything outside the signed scope and we schedule test windows with your team.
Scope and authorization
We agree on what gets tested, when and with which accounts, and sign it.
Testing
We combine automated scanning with manual testing on what matters.
Report
Every finding with evidence, risk level and how to fix it.
Retest
Once your team fixes things, we test again and update the report.
04 · Options
Options
Web or API pentest
Manual and automated testing of your application or API.
- OWASP Top 10 and API Top 10
- Executive and technical report
- 1 retest included
- 1 to 3 weeks depending on scope
MXN 28,000 – 85,000 + VAT
05 · Technologies
Methodologies and tools
- OWASP Top 10
- OWASP API Top 10
- Burp Suite
- Nmap
- Nuclei
- ZAP
- Certificate Transparency
We only test systems you own, or third-party systems whose owners sign the authorization. The pentest price depends on the number of screens, endpoints and roles to test; we confirm it before we start.
06 · Contact
Request your audit
Tell us what you want reviewed and we'll send the scope and price.
- Scope and price before we start
- Written confidentiality
- Retest included with the pentest
Loading form…
Scope, timeline and budget are agreed per project. An inquiry does not contract a service or submit a payment.