Penetration testing and cybersecurity for SMEs
Penetration testing scoped to the size of your business: a quick diagnostic, three assessment levels and a monthly retainer. Each quote is prepared for your specific case.
How we work with SMEs
Small teams rarely have a dedicated security lead. The packages have a limited scope, plain language and fix priorities that your team or IT provider can act on.
Scope agreed in writing
The proposal states what is tested, the timeline and the deliverables before we start.
Certified specialists
eJPT, eCPPTv2 and CRTP certified professionals with SME experience.
Agreed schedule
Testing runs in windows agreed with you, so your operations are not interrupted.
Practical reports
Clear reports with actionable recommendations and defined priorities.
Available packages
Choose by company size and what you need tested. If in doubt, request a quote and we will recommend the right package.
Quick vulnerability scan and basic diagnostic for micro-businesses looking for an entry-level security overview.
Key features
- Automated external vulnerability scan
- Open-source intelligence (OSINT) check
- Basic email security check (SPF/DKIM/DMARC)
- Summary report of findings
Deliverables
- 3-5 page summary report
- List of exposed services
- High-level remediation steps
Essential security assessment for small businesses looking to understand their current security posture and identify immediate vulnerabilities.
Key features
- Network vulnerability scan
- Basic web application testing
- Security configuration review
- Password policy assessment
- Basic social engineering awareness test
- Executive summary report
- +2 additional features
Deliverables
- 8-12 page security assessment report
- Risk matrix with priority levels
- Quick-win security improvements list
- 30-minute results presentation
Comprehensive security evaluation for growing businesses that need detailed analysis of their security infrastructure and tailored improvement strategies.
Key features
- Comprehensive network penetration testing
- In-depth web application security testing
- Mobile application security assessment (if applicable)
- Social engineering simulation campaign
- Wireless network security evaluation
- Email security and phishing resistance testing
- +6 additional features
Deliverables
- 25-35 page comprehensive security report
- Executive dashboard with key metrics
- Technical findings with proof-of-concept
- Risk-prioritized remediation plan
Enterprise-grade security audit with advanced penetration testing, red team operations, and comprehensive compliance validation for organizations requiring the highest level of security assurance.
Key features
- Advanced persistent threat (APT) simulation
- Red team operations with multi-vector attacks
- Full-scope penetration testing (network, web, mobile, wireless)
- Advanced social engineering campaigns
- Physical security assessment
- Cloud infrastructure security testing
- +10 additional features
Deliverables
- 50-75 page comprehensive security audit report
- Executive briefing with board-ready presentation
- Detailed technical appendix with all findings
- Risk heat map and business impact analysis
Continuous security monitoring and support for SMEs that need ongoing protection without hiring a full-time security team.
Key features
- Monthly external vulnerability scanning
- Quarterly internal security review
- 1 Annual Penetration Test included
- Priority Incident Response (SLA 4h)
- Security consulting hotline
Deliverables
- Monthly automated scan reports
- Quarterly security posture meetings
- Annual full pentest report
Package comparison
| Feature | Micro | Basic | Standard | Premium | Retainer |
|---|---|---|---|---|---|
| Network Security Testing | Automated scan | Basic scan | Comprehensive testing | Advanced penetration testing | Monthly Scans |
| Web Application Testing | N/A | Basic vulnerability scan | In-depth security testing | Full-scope application testing | Annual Pentest |
| Social Engineering | N/A | Awareness test | Simulation campaign | Advanced campaigns + physical | On-demand |
| Compliance Assessment | N/A | Basic review | Gap analysis | Full compliance audit | Continuous |
| Report Detail Level | 3-5 pages | 8-12 pages | 25-35 pages | 50-75 pages | Monthly reports |
| Follow-up Support | None | Email support | 3-month consultation | 1-year ongoing support | Always-on Hotline |
How it works
From quote request to final report, in four steps.
- 1
Quote request
Tell us the package or describe what you need. We review your case and answer questions.
- 2
Proposal
We send a proposal with scope, schedule and price. Testing only starts after your approval.
- 3
Testing
We test on the agreed dates, with a direct contact throughout.
- 4
Report and support
You receive a report with vulnerabilities by priority and support to fix them.
Not sure which package to choose?
Describe your business and what you need to protect. We will recommend a package and send a quote.