Every finding is verified by a human before it reaches you. That is the whole product. The tiers differ in how much of your surface a human gets to look at.
Tiers Compare everything Starter $1,000 one-offOne app or site, tested unauthenticated. The honest answer to "is my thing safe?"
✓ Full OWASP Top 10 pass ✓ External attack surface map ✓ Configuration & headers audit — Authenticated testing, up to 3 roles — API & endpoint testing — Business-logic abuse cases — Chained-finding analysis — Remediation call with your developer — Continuous surface monitoring — A deep test each quarter — Deploy-diff on every change — Shared channel with your tester Report in 5 business days · 1 re-test within 30 days Book a Starter scan Pro Most chosenEverything in Starter, plus the half of the application a logged-out tester never sees.
✓ Full OWASP Top 10 pass ✓ External attack surface map ✓ Configuration & headers audit ✓ Authenticated testing, up to 3 roles ✓ API & endpoint testing ✓ Business-logic abuse cases ✓ Chained-finding analysis ✓ Remediation call with your developer — Continuous surface monitoring — A deep test each quarter — Deploy-diff on every change — Shared channel with your tester Report in 7–10 business days · 2 re-tests within 60 days Book a Pro engagement Retainer $795/mo billed monthlyFor teams shipping weekly, where the surface changes faster than an annual test can track.
✓ Full OWASP Top 10 pass ✓ External attack surface map ✓ Configuration & headers audit ✓ Authenticated testing, up to 3 roles ✓ API & endpoint testing ✓ Business-logic abuse cases ✓ Chained-finding analysis ✓ Remediation call with your developer ✓ Continuous surface monitoring ✓ A deep test each quarter ✓ Deploy-diff on every change ✓ Shared channel with your tester Unlimited re-tests · 30 days notice to cancel, no minimum term Talk about a retainerMultiple applications, more than three roles, a monolith with hundreds of endpoints, or a scope someone else has already written for you. Those are quoted by the day rather than by the tier — send us the surface and we'll come back with days and a number.
DAY RATE $450/day Scope a custom engagementWe don't sell "unhackable" — no one can honestly sell that. We sell the highest-signal picture of where you are exposed today, and the shortest path to closing it. If we think a cheaper tier is enough for you, we'll say so on the call.
Earthshaker SecurityWe find the cracks before they do. Automated and human-verified security testing for web applications.
earthshakersecurity.com · contact@earthshakersecurity.com
Earthshaker Security