Security audit
Most breaches don’t need a genius attacker. They need one open database, one exposed key or one missing permission check. Apps built fast with AI tools often have all three.
Find the holes before attackers do.
A hands-on security review of your web app: logins, access, exposed keys, database rules, APIs and payments. Every issue ranked by severity, with a fix. Led personally by Marian Sorca.
From $5,0002 weeksReply within 24 hours
(01) What we check
Where would an attacker get in?
Automated checks across the whole codebase, and a senior review by hand of the parts that carry the risk.
(02) Prices
What a security audit costs.
Three fixed-price packages with a delivery time, and Enterprise for larger companies. You get a written scope and price before work starts.
Starter
Focused Audit
$5,000
Delivery: 2 weeks
Logins, access rules, exposed keys, database rules, security headers and backups, before launch or on a live app.
Get a quoteStandard
Full Audit
$10,000
Delivery: 3 weeks
Plus APIs, payments, webhooks, dependencies and the OWASP Top 10.
Get a quotePremium
Deep Review
$20,000
Delivery: 4–6 weeks
Several apps or a large system.
Get a quoteEnterprise
$40,000 – $150,000+
Large or multi-product systems, several teams, or a compliance deadline.
Contact usSecurity work
| Engagement | Typical price |
|---|---|
| Security review and hardening: the common holes in your web app or site found, fixed and checked again | $10,000 – $40,000 |
| Pentest fixes: we fix what your penetration test or security audit found | $5,000 – $25,000 |
| Hacked site or app recovery: urgent cleanup, closing the hole, and getting you back online | From $7,500 |
| Security care: monthly updates, monitoring, alerts and scans, with small fixes included and bigger work quoted | From $3,000 a month |
We harden your app against common attacks. We don’t certify compliance or replace a formal penetration test.
Monthly engagements run month to month, with 30 days’ notice. An audit is credited in full if you book a build or a CTO month within 60 days.
Want a senior engineer every month? Monthly plans from $2,000 a month, fixed or hourly. Discuss a monthly plan
(03) After the audit
The report is yours. So is the next step.
Every finding comes with how serious it is and how to fix it. What happens next is your choice.
- A fixed price for the fixes, starting with what carries the most risk: rescue and modernization
- A monthly plan, if you want a senior engineer on call
- A fractional CTO, if the findings point to bigger decisions
- Or your own developers fix it: the report is written so they can act on it
An audit is credited in full if you book a build or a CTO month within 60 days.
Need both? One combined report, priced as both audits. Code and architecture audit
(04) Questions
Questions before an audit.
How long does a security audit take?
About 2 weeks for a focused audit, 3 weeks for a full audit, and 4 to 6 weeks for several apps or a large system.
Is this a penetration test?
No. It’s a hands-on expert review of your code and setup. If you need a certified penetration test or a compliance report like SOC 2, you need a specialist firm, and we can fix what they find.
Is my AI-built app safe to launch?
Often not yet. Exposed keys and open database rules are common in apps built with AI tools. The audit looks for them before someone else does.
Do you need access to my code?
Read-only access to the repository and the hosting setup is enough. We don’t change anything during the audit.
Code audit or security audit?
The security audit covers vulnerabilities, access, data exposure and payments. The code audit covers quality, structure, scaling and cost. Need both? One combined report, priced as both audits.
Can you work with my existing developers?
Yes. We share the findings with them and can review their fixes.
Do you sign an NDA?
Yes, before any access. Your code and business details stay private.
(05) More in this lane
More in Fractional CTO and audits, if you need it.
Each one with a starting price and a delivery time. Pick one, or combine them.
Fractional CTO
Senior technical decisions, roadmap and code review, month by month.
From $10,000 a monthCode and architecture audit
Architecture, code quality, tech debt and scaling risks, with a ranked fix plan.
From $5,000 · 2 weeksTechnical due diligence
An independent technical review before you invest, buy or raise.
From $10,000 · 2 weeksDevelopment partner for agencies
Senior web app, AI and Shopify delivery under your brand.
From $4,000 a monthStart a project
Have a project in mind?
Where others see impossible, we see solutions.
When a project gets called too hard, our answer is simple: bring it.
We don’t fear complexity. It’s where we do our best work.
Tell us what you’re building and where it’s stuck. Within 24 hours you get useful questions and a proposed next step, or an honest answer if we’re not the right fit.
- 01Tell us about it.A few lines on the goal, the deadline and what exists today.
- 02A reply within 24 hours.Useful questions and a proposed next step, in writing.
- 03Scope and price agreed before work starts.Projects from $2,000. Ongoing fractional CTO work is billed monthly.
Email
[email protected] ↗
Response time
Within 24 hours, 7 days a week