Pricing
Surveys are free, and so is weekly monitoring of the sites you verify. You pay for a Monitor plan to watch sites you have not verified, for a person to review your app, or for fixes.
Free surveys
Free scan
£0
A passive surface check of any site, as a visitor's browser sees it. No sign-up needed.
- Grade from A to F
- Every finding, rated by severity
- Full report with fixes when you add your email
Verified scan
£0
Deeper checks, once you have proved you own the domain.
- Checks for exposed files, directory listing, CORS and admin routes
- Supabase row level security check
- Weekly monitoring if you turn it on, with an email only when something new appears or a finding is fixed
Requires ownership verification with a DNS record or a file on your site.
Weekly monitoring
Verified sites are monitored free, with the deeper checks. For sites you own or are authorised to test but have not verified, a Monitor plan runs a passive scan every week and emails you only when a finding is new or fixed.
Monitor
£9.99 a month, including VAT
3 unverified sites watched weekly
- Passive weekly re-scans of up to 3 sites you own or are authorised to test
- An email only when a finding is new or fixed
- Verified sites monitored free on top, with the deeper checks
- Cancel anytime from Billing in your account
Online subscriptions open soon.
Monitor Plus
£19.99 a month, including VAT
10 unverified sites watched weekly
- Passive weekly re-scans of up to 10 sites you own or are authorised to test
- An email only when a finding is new or fixed
- Verified sites monitored free on top, with the deeper checks
- Cancel anytime from Billing in your account
Online subscriptions open soon.
Before we scan a site you have not verified, you confirm in your account that you own it or are authorised to test it. We honour every opt-out, and a passive scan reads only what any visitor's browser receives. It is a surface check, not a full audit.
Security audit
A person reviews your app properly, including everything a scan cannot reach, and writes up each issue in plain English with the steps to fix it, most important first.
What is included
- Sign-up, login and password reset
- Database rules in Supabase or Firebase
- API routes and who can call them
- Secrets, keys and environment settings
- Whether the vulnerable libraries in your app can actually be exploited
- Everything in the verified scan, checked by hand
- A written report and a call to walk through it
£395 including VAT
Fixed price. Credited in full against any fix work you book with us afterwards.
Delivered by the date we agree with you once we have access.
Online booking opens soon. Until then, email us and we will arrange it with you.
Fixes and ongoing care
- Fix packages
- Priced per finding
-
Found something in a free scan? Send us the link to your report and we will quote a fixed price for those fixes, such as upgrading a library with known vulnerabilities or adding missing security headers.
After an audit, we quote a fixed price for each finding in your audit report, so you can choose what to fix and know the cost first. The audit fee you paid comes off the total.
- Care plan
- Monthly. Coming soon
- Ongoing checks and help as your app changes, for teams who keep shipping new features.
Prices are in pounds sterling, and the audit price and the Monitor plan prices include VAT. The free scan is a surface check, not a full audit, and passing it does not mean your app is secure.