Full audit · from €5,900 excl. VAT
The full audit. Every finding proven.
The full audit combines the app audit and the code audit. What we find in the code, we prove in the running application. An expert reviews every finding before it goes into the report. The result is solid proof for customers, investors and regulators.
- Price
- from €5,900 excl. VAT
- Delivery
- 10 working days
- Access
- URL, test accounts and code
- Result
- 25–30-page report
All prices net, plus VAT. For businesses only. Contract by individual offer.
What we check
- App and code audit combined
- Code findings proven in the running app
- Every finding checked by an expert
- 25–30-page report with CVSS ratings
- Debrief and re-check after your fixes
12,640 signals → 27 proven findings (example)
How it works
- 01
Intro call
15 minutes on scope, access and timeline. NDA and DPA first.
- 02
App and code
Logged-in tests and code analysis run in parallel, findings confirm each other.
- 03
Expert review
An experienced developer verifies every finding and rates it with CVSS 3.1.
- 04
Debrief and re-check
We walk you through the report and re-check your fixes.
What you get
- 25–30-page report with management summary
- Every finding proven and rated
- Action plan: now, next sprint, backlog
- Debrief and re-check after your fixes
Compared
| Security checkfree | App auditfrom €990 | Code auditfrom €1,900 | Full auditfrom €5,900 | EnterpriseOn request | |
|---|---|---|---|---|---|
| What is tested | |||||
| TLS, security headers, cookies | |||||
| Exposed files, admin and debug pages | |||||
| Login, sessions, rate limits | |||||
| Access rights: can user A see user B’s data? | |||||
| Injection (SQL, XSS, SSRF) | |||||
| Secrets and keys | |||||
| Dependencies and known CVEs | |||||
| Supply chain, Docker, CI/CD | |||||
| Code quality and maintainability | |||||
| Architecture review and threat modelling | |||||
| Cloud infrastructure (AWS, Azure, Kubernetes) | |||||
| What you get | |||||
| Grade and number of findings | |||||
| Report with a prioritised action plan | |||||
| CVSS 3.1 ratings | |||||
| Code findings proven in the running app | |||||
| Expert review of every finding | |||||
| Debrief and re-check | |||||
| NIS2 and CRA readiness mapping | |||||
| Dedicated contact, recurring audits | |||||
| Framework | |||||
| Access | URL and email address | Address + 2 test accounts | Read access to the code | URL, test accounts and code | individual |
| Delivery | within 2 hours on working days | 3 working days | 5 working days | 10 working days | individual |
includedpartlynot included
Frequently asked questions
How is it different from app plus code audit?
Findings confirm each other, an expert reviews each one, and debrief and re-check are included.
Is the report suitable for NIS2 or due diligence?
It documents method, scope, findings and measures and works as proof. It does not replace a certification.
When does the delivery time start?
Once access and code are handed over. The Express option makes it faster.