Managed Penetration Testing
Penetration testing you can put on a price list instead of scoping from scratch every time somebody asks. You commit to a monthly quota of engagements, we run them against a documented methodology with a senior review before anything is released, and the report leaves in your template with your logo on the cover.
$967.50USDper web application / monthly quota
List $1,290 — what your customer pays. You keep the difference. · 25% off list
- Priced by
- per web application / monthly quota
- Delivered as
- Your brand, your template
- Client access
- Scoped, granted by your customer
Scoped before you quote, not after you have sold it
Scope types are pre-defined — web application, API, external infrastructure, internal network — so you can quote from the price list without a scoping call with us first.
Testing follows a documented methodology aligned to OWASP and PTES, and the methodology document is in the partner pack so you can hand it to a customer who asks.
Every report is reviewed by a senior tester before release; nothing reaches a customer straight out of the tester notes.
Findings carry reproduction steps and evidence, so a developer can confirm the issue without a call, rather than a scanner ID and a CVSS score.
A retest window is part of every engagement, so fixed findings are verified and closed inside the same report cycle instead of becoming a second invoice.
Reports are delivered in your template, in Thai or English, with your logo and your engineer named as the point of escalation.
You quote it, we operate it, you deliver it
Your price is the published list price minus 25%, on every line in the catalogue. You decide what your customer pays and keep the difference, so your margin is settled before the quotation leaves your office.
Our engineers work it from Bangkok on UTC+7, against a methodology that is written down rather than improvised per customer. A senior engineer reads every finding before it leaves the building, because you are the one who has to defend it.
Findings, reports and escalations reach you in your template with your logo on them. Your customer talks to you, and our name is not on the ticket.
What a partner checks before putting this on their price list
What happens if we outgrow the quota?
You raise the quota from the following month, or buy an extra engagement at list rate. The quota is a planning floor so we can reserve tester capacity for you, not a ceiling on what you are allowed to sell.
Can our customer meet the tester?
No — we work behind you and are not introduced to your customer. When a technical walkthrough is required, we brief your engineer beforehand with the findings, the reproduction steps and the questions we expect to be asked, and your engineer runs the meeting.
Do you test production systems?
Yes, with an agreed test window, a rules-of-engagement sheet signed through you, and a named contact on the customer side who can stop the test. Destructive testing is excluded unless it is explicitly authorised in that sheet.
How far in advance do we need to book?
An engagement drawn from your monthly quota is already reserved capacity, so it is scheduled rather than queued. Ad-hoc engagements outside the quota depend on the schedule at the time you ask.
Will an auditor accept the report?
The report documents scope, methodology, findings, evidence and the retest outcome, which is what an audit asks to see. It is issued under your name, so you are the testing provider of record.
Which test types are inside the quota?
Web application, API, external infrastructure and internal network testing. Anything outside those is quoted separately rather than silently drawn against your quota.
Pick one customer. We will run it for 60 days.
Choose a customer you already serve. We deliver Managed Exposure on their domain for two months, in your template, at no cost — so you can see exactly what your customer would receive before you sign anything.
Apply as a partner