Features / Services
Silver Package
Gold Package
Platinum Package
Testing Methodology
Black Box Testing (External attacks only)
Gray Box Testing (Controlled privileged access)
White Box Testing (Full access, code-level, architecture review)
Platforms Covered
1 Platform (Website or Mobile App)
2 Platforms (Website + Mobile App)
Full Ecosystem (Website + Android App + iOS App + API Backend)
OWASP Testing Coverage
OWASP Top 10 Web + OWASP Mobile Lite
Full OWASP Web & Mobile MSTG Coverage
Advanced OWASP, Logic Abuse, Business Flow & Architecture Testing
API Penetration Testing
Basic API endpoint testing
Full API testing with authentication & rate-limit checks
Enterprise API assessment + fuzzing + token security analysis
Authentication & Session Testing
Basic session testing
Deep session management testing + MFA evaluation
Full authentication, SSO, OAuth, JWT, AD/LDAP testing
Business Logic Testing
Light validation
Intermediate logic abuse checks
Full business logic exploitation testing
Static Application Security Testing (SAST)
Not included
Partial code review (selected modules)
Full SAST source code analysis (secure coding, architecture review)
Dynamic Application Security Testing (DAST)
Standard scanning + manual validation
Advanced dynamic testing
Full DAST + behavioral analysis + ML-driven anomaly checks
Cloud & Hosting Environment Review
Basic configuration review
Cloud security misconfigurations (AWS/Azure/GCP)
Full cloud security assessment + IAM review + container & VM checks
Network Security Testing
Basic external scan
Internal & external network checks
Full network penetration + firewall evaluation
Reverse Engineering (Mobile)
Not included
APK/IPA static analysis
Full reverse engineering, code obfuscation testing, certificate pinning bypass
Data Storage & Privacy Testing
Basic compliance checks
Deep data leakage & storage testing
Full GDPR/CCPA-compliant data privacy & encryption validation
MITRE ATT&CK Mapping
Basic mapping
Partial mapping to tactics
Full mapping across all stages—recon to exploitation
Threat Modeling
Not included
Application threat model included
Full STRIDE threat modeling + risk scoring
Reporting
Standard report with risks & fixes
Detailed report with PoC screenshots
Executive summary + full technical report + remediation roadmap
Retesting
1 Retest Cycle
2 Retest Cycles
Unlimited Retesting for 90 Days
Support
Email Support
Email + Scheduled Call Support
Dedicated Security Analyst + Priority Support
Best For
Small businesses or startups
Growing companies
Enterprises & high-risk industries
