I list a fixed price for services with a clearly limited scope. For larger or individual projects, we first clarify what needs to be reviewed or done. I then prepare a specific proposal based on the agreed scope.<\/p>\n
A practical security review of one smaller web application within a predefined scope.<\/p>\n
The review covers one domain or environment, up to 3 user roles and up to 5 main application flows. It focuses on authentication, sessions, roles and permissions, forms and inputs, file uploads, APIs and common web security risks, including typical issues in applications developed quickly or with the help of AI.<\/p>\n
You receive a prioritised report, remediation recommendations and a final consultation.<\/p>\n
\nCZK 35,000 for the predefined scope<\/strong> Typical delivery: within 7 business days after the scope has been confirmed and the required access has been provided.<\/p>\n \nView the exact review scope<\/a> For larger, more complex or more sensitive applications and systems that do not fit within the predefined scope of the Web App Security Review.<\/p>\n The scope is based on the tested system, the number of roles and environments, APIs, administration interfaces, application flows, data sensitivity, the required depth of testing and the expected deliverables.<\/p>\n You receive an executive summary, prioritised findings, impact descriptions, technical evidence and remediation recommendations according to the confirmed scope.<\/p>\n Price based on the scope after a short initial scoping discussion.<\/strong><\/p>\n Remediation, retesting and work outside the confirmed scope are not automatically included in the proposal.<\/p>\n \nView the custom penetration test details<\/a> A review of a Linux, VPS or Docker environment focused on access controls, SSH, firewall configuration, updates, exposed services, reverse proxies, backups, monitoring, logging and the handling of sensitive information.<\/p>\n You receive a practical list of risks and priorities: what needs to be addressed first, what should be added and where follow-up hardening makes sense.<\/p>\n Price based on the scope after a short initial discussion.<\/strong><\/p>\n \nView the Infra Audit details<\/a> Follow-up or standalone implementation work covering access controls, SSH, firewall configuration, updates, Docker, reverse proxies, TLS, backups, monitoring, logging or unnecessarily exposed services.<\/p>\n This is not long-term server administration. The scope of the changes and the implementation process are agreed in advance based on the current environment and the operational risk.<\/p>\n Price based on the scope and the current state of the environment.<\/strong><\/p>\n Request server hardening<\/a><\/strong><\/p>\n For smaller, clearly limited tasks, diagnostics, configuration, technical consultations and follow-up work involving Linux, VPS, Docker or nginx environments.<\/p>\n \nCZK 3,500 \/ hour<\/strong> \nCZK 30,000 \/ 10 prepaid hours<\/strong> \nView the service details<\/a> Limited assistance with understanding an incident, identifying the first priorities and reviewing the most critical accounts, access permissions, servers or applications.<\/p>\n The service is available depending on current capacity. This is not a continuous 24\/7 incident response service.<\/p>\n Price based on the situation and scope.<\/strong><\/p>\n Describe the incident and check availability<\/a><\/strong><\/p>\n An individual consultation focused on a specific situation: accounts, MFA, password managers, devices, privacy, access controls or practical personal or team opsec.<\/p>\n \nCZK 3,500 \/ hour<\/strong> Minimum duration: 1 hour.<\/p>\n \nView the consultation details<\/a> Practical digital security training prepared around the specific team, its way of working and the relevant risks.<\/p>\n Price based on the scope, format and required preparation.<\/strong><\/p>\n \nView the training details<\/a>
\nApproximately EUR 1,450.\n<\/p>\n
\nRequest a security review<\/a><\/strong>\n<\/p>\n
\n<\/span>Custom Penetration Test<\/span><\/h3>\n
\nDiscuss the penetration test scope<\/a><\/strong>\n<\/p>\n
\n<\/span>Servers and operations<\/span><\/h2>\n
<\/span>Infra Audit<\/span><\/h3>\n
\nRequest an Infra Audit<\/a><\/strong>\n<\/p>\n
\n<\/span>Server Hardening<\/span><\/h3>\n
\n<\/span>Additional services<\/span><\/h2>\n
<\/span>Hourly Sysadmin<\/span><\/h3>\n
\nApproximately EUR 145 \/ hour.\n<\/p>\n
\nApproximately EUR 1,240.
\nPackage validity: 3 months.\n<\/p>\n
\nRequest a specific technical task<\/a><\/strong>\n<\/p>\n
\n<\/span>Security Incident Assistance<\/span><\/h3>\n
\n<\/span>Personal Consultation<\/span><\/h3>\n
\nApproximately EUR 145 \/ hour.\n<\/p>\n
\nRequest a personal consultation<\/a><\/strong>\n<\/p>\n
\n<\/span>Corporate Training<\/span><\/h3>\n
\nRequest corporate training<\/a><\/strong>\n<\/p>\n
\n