A per-platform mobile pentest for the flows that matter most.
Use it when a standard snapshot is no longer enough and you need realistic attacker-path validation, reproducible evidence, and a clear answer on what deserves attention first.
Depth over vulnerability count
Evidence and verification paths, not scanner exports
Clear escalation when backend or cloud scope should be expanded
Standard scope
iOS or Android
A single platform per engagement keeps depth honest
Output
Decision-ready
Executive summary, action plan, findings detail, and evidence annex
Verification
Included pass
One timeboxed verification pass for the agreed fixes
If you only need a fast snapshot, start with the Health Check instead.
When to choose this offer
A strong fit when
One mobile platform carries material business risk and deserves deeper review
You need reproducible evidence before a major launch or high-trust customer conversation
A prior snapshot already showed that a specific platform or flow needs real depth
A weaker fit when
You mainly need a quick prioritization pass
You need broad cloud or API assurance beyond what mobile-led scope can credibly cover
Both platforms must be covered at once without accepting the cost and time of two scoped engagements
Standard scope shape
The scope stays decision-useful by staying explicit. A deeper assessment only works when breadth does not quietly erase depth.
Platform unit
One platform
Android by default; iOS is an opt-in
Flow depth
Primary critical flows
Depth is concentrated where business trust boundaries sit
Testing mode
Grey-box, evidence-first
Builds, roles, and environment context are used when available
What the deliverable is designed to do
Leadership
Executive brief
Summarizes what matters most, why it matters now, and where the business decision should focus.
Technical
CTO action plan
Explains the major themes, likely attacker paths, and the recommended remediation sequence.
Evidence
Evidence annex
Provides the supporting detail needed to fix and verify without bloating the core report.
How the engagement runs
Intake and scope lock
Confirm the platform, builds, roles, and the flows that justify deep review.
Recon and testing
Map the relevant trust boundaries, then test realistic attacker paths with depth where it matters.
Prioritization and delivery
Translate findings into business impact, engineering next steps, and verification guidance.
Verification pass
Use the included timeboxed verification window for the fixes that were part of the agreed engagement.
Availability is intentionally limited
This offer is not positioned as instant-book inventory. It is scoped and scheduled only when the right delivery window and prerequisites are available.
Pentest questions that matter early
Why is standard scope one platform at a time?
Because honest depth requires focus. Treating iOS and Android as one cheap bundle usually weakens the evidence and the decisions that follow.
What if we eventually need both platforms covered?
Select both in the configurator and each platform is quoted in the same request, or earn the second one as a milestone through a retainer when the pacing fits better.
When should we start with a Health Check instead?
When you need a quick answer on what matters most, or when you are not yet sure which platform or flow deserves the deeper budget and attention.
Related offer paths
Security Health Check
Best when you need a fast snapshot before committing to deep per-platform work.
A fast, productized security review for early-stage teams that need a bounded answer on what matters most next.
View Health CheckSecurity Retainer
A better fit when the main need is steady remediation, verification, and continuous support between deeper milestones.
Bounded monthly product security support for teams that want predictable access, faster verification loops, and continuous risk reduction without pretending security is unlimited-on-demand.
View RetainerChoose what to test, then request a quote.
Every price is a starting point. We review each request and send a written quote, so nothing here is an order.
At least one mobile platform stays selected.
Selected: Android
Estimated from EUR 4,999
Limited availability: lead time and capacity are confirmed with the quote.