Emagined Pentest Pricing

Includes:

• Dedicated Project manager

• Internal Pentest Resource
  (no freelance pentester pools)

• Access to the Emagined Clarity Platform

• Online Report Delivery

• Free Remediation Check

• Vulnerability Assessment

• *Pricing dictated by the number of IPs
   

Standard testing includes automated and manual scans and manual validation of vulnerabilities.  Some assessment and analysis may be performed.  This is the minimal version of the test.

​Includes everything in standard, plus:

• Dedicated Project manager

• In-house Pentest Resource
  (no freelance pentester pools)

• Access to the Emagined Clarity Platform

• Online Report Delivery

• Free Remediation Check

• Up to xxx IP's External Scan

• Up to xxx Internal IPs

• 1-3 Applications/APIs

• Vulnerability exploitation within the defined scope

• A single validation of up to 5 basic level findings (e.g., OWASP Top 10) identified in the initial report to check if they have been remediated)

• Optional CREST-certified testing uplift available at Level 2 (follows CREST-approved testing methodology, CREST logo on reports, satisfies EU testing requirements 

• Optional advanced exploitation, persistence, and pivoting. 

• Option to validate the effectiveness of existing security controls or awareness efforts

• Option to evaluate intrusion detection effectiveness

• Option to test incident response capabilities 

Includes everything in Premium, plus:

• Dedicated Project manager

• Internal Pentest Resource
  (no freelance pentester pools)

• Access to the Emagined Clarity Platform

• Online Report Delivery

• Free Remediation check

• Expanded Penetration Test (Level 3) and adds in attack aggressiveness and sophistication over time with each subsequent test. 

• One (1) penetration test to establish a CUSTOMER baseline

• Three (3) follow-on penetration tests within the same 12-month contiguous period which increases in attack aggressiveness and sophistication over time, and with each subsequent test iteration

• Tests are designed to demonstrate what a trained and dedicated attacker might accomplish over an extended period. Additionally, this test will be enhanced to include as needed the following:

  • Industry Monitoring

  • Dedicated research of CUSTOMER-specific, potential, or requested vulnerabilities

  • Validation of newly discovered attack vectors

  • Application of industry currently emerging threats

  • Attack Recidivism

We need to know a few things before we can give you a price. 

• Monthly tests?

• Quarterly tests?

• How many IP's?

​