Which test do you actually need — and what does it cost?
Six questions. You then see immediately which type of exercise fits your situation, how many tester-days are realistic and which budget band to plan for. No sales call required, no email gate — the result appears right here on the page.
What is the trigger?
Is the scope check free?
Yes, and without an email gate. The result including effort and budget band appears directly on the page. Only if you want the proposal in writing as a quote basis do we need an address.
How reliable is the budget range?
It is based on typical engagements of comparable size and is explicitly indicative. The binding price only follows from the agreed scope — the number of applications, roles, environments and evidence requirements move it noticeably.
What is the difference between a pentest and a red team?
A penetration test answers whether vulnerabilities exist in a defined surface and is optimised for coverage. A red team mandate is goal-based and answers whether your detection and response stop a realistic adversary — coverage is explicitly not the objective.
We are in DORA scope — do we necessarily need a TLPT?
Not every financial entity has to run a TLPT. The competent authority designates which entities are required to. Independently of that, DORA requires regular digital operational resilience testing — penetration tests are sufficient for that in many cases.
How fast do we get a binding quote?
After the scope check a senior operator responds within 24 hours. For a clearly bounded penetration test the quote is usually ready after one short scoping call.
Are my answers stored?
Only if you submit the form at the end. Until then the answers stay in your browser. Submitted details are processed solely to respond to your enquiry.