Startups, SMBs, and bootstrapped teams that need professional penetration testing at a price that fits — without the enterprise markup. Fixed-price engagements with auditor-ready reports.

Web app pentest from $1,500; full-scope from $3,500 (published)

MSPs, SaaS companies, and regulated organizations that need AI-powered penetration testing with continuous monitoring, compliance-aligned reports, and a platform that scales across client engagements.

Pentest credits from $500; continuous pentesting from $2,000/mo (published)

SaaS companies, startups, and growing tech teams that want fast, AI-powered vulnerability scanning and penetration testing with compliance-ready reports — automated scanning plus expert manual verification.

Automated scans from $99/mo; manual pentest from $2,500 (published)

B2B SaaS companies going up-market (often Series A or B) that need pentests and security advisory which hold up in enterprise buyer security reviews

Healthcare, finance, and government organizations across MENA and GCC seeking ISO 27001, SOC 2, HITRUST, or data privacy certifications with regional regulatory expertise

Remote quarter-time ~10 hrs/wk: $7,500 USD/month; Remote half-time ~20 hrs/wk: $9,000 USD/month; Full-time onsite: $19,000 USD/month (published)

Startups and small businesses seeking fast, fixed-fee compliance readiness across SOC 2, ISO 27001, and GDPR — especially in the Gulf, UK, and US — with hands-on implementation support and compliance platform management

SOC 2 or ISO 27001 readiness and implementation: $4,000 under 50 employees, $5,500 over 50 (external CPA audit fee excluded); ongoing compliance + vCISO from $500/month; pentest from $1,000; internal audit from $1,000, scope-dependent (published)

SMBs in the Microsoft ecosystem needing fully managed compliance (SOC 2, CMMC, ISO 27001) alongside IT support and security under one roof

Enterprises and high-growth tech companies that need senior-led offensive security across applications, networks, cloud, and AI, with reports that hold up to enterprise buyer and auditor scrutiny

Fast-moving product and security teams that need on-demand penetration tests they can launch in days, with findings and retests tracked in a platform and wired into developer workflows

Globally-distributed organizations needing broad multi-framework compliance consulting - SOC 2, ISO 27001, PCI DSS, GDPR, HITRUST - with offices across 5 countries

Australian businesses and government-adjacent organizations needing CREST-certified penetration testing combined with SOC 2 or ISO 27001 readiness

SOC 2 compliance program from $8,000 AUD fixed price (published)

Companies that need manual, OSCP-led penetration testing with auditor-ready reports mapped to SOC 2, ISO 27001, HIPAA, or PCI compliance requirements

High-growth UK businesses that need fractional CISO leadership plus hands-on certification support for ISO 27001 and SOC 2 compliance

Product and engineering teams that need deep, source-assisted application security audits of complex platforms, including GraphQL, ElectronJS, and LLM-based systems

Companies that want senior-only, manual penetration testing across web, mobile, API, cloud, and network, with consultants who work directly with developers to fix what they find

Teams that need deep, source-assisted security assessments for complex web, mobile, IoT, or hardware products and want findings other firms miss, right-sized to the codebase and budget

Indian SaaS, FinTech, and cloud companies targeting enterprise deals in US, UK, UAE, or Australia that need end-to-end SOC 2 readiness from a CERT-In empanelled partner

Larger enterprises and regulated organizations that need a global provider for penetration testing, security consulting, and incident response under one roof

Large organizations and regulated enterprises that want continuous, expert-led penetration testing delivered through a managed platform rather than one-off point-in-time tests

Startups and SMBs that need right-sized, affordable penetration testing and hands-on SOC 2 readiness support without the cost and overkill of enterprise engagements

Entry 'lay of the land' SOC 2 pentest from $2,800 (published)

Organizations that want adversary-emulation-grade offensive security and continuous threat exposure management rather than a one-off checkbox penetration test

UK organisations that want CREST-accredited penetration testing and ISO 27001 consultancy from one provider, with findings tied back to the controls auditors check

Penetration testing from £2,500; managed SOC from £900/month (published)

Security-conscious teams that want adversary-style penetration testing tied to SOC 2 Trust Services Criteria, not a reformatted vulnerability scan, with an auditor-ready report

Companies from high-growth startups to the Fortune 1000 that want a deep, manual, research-driven pentest mapped to SOC 2 and vendor-security requirements rather than a scan

Startups and growth-stage SaaS companies seeking a one-stop cybersecurity partner covering vCISO, compliance readiness, penetration testing, and ISO 27001 internal audits

Organizations seeking end-to-end SOC 2 support from readiness assessment through ongoing Type I/Type II compliance with hands-on consulting approach

Cloud-native SaaS, fintech, and regulated companies that want an independent CREST-accredited pentest mapped to SOC 2, ISO 27001, or PCI, kept separate from their audit firm

Organizations seeking a global cybersecurity partner covering SOC 2 readiness, ISO 27001 consulting, penetration testing, and managed SOC services across the US and India

US-based mid-market and emerging companies that need a full cybersecurity program: SOC 2 readiness, penetration testing, vCISO, and multi-framework compliance under one roof

High-growth SaaS companies preparing for SOC 2, HIPAA, or ISO 27001 that need manual, exploit-driven pentests with compliance mappings and built-in retesting to unblock enterprise deals

Web & API pentest from $10,800; PTaaS from $21,400 (published)

Organizations that ship frequently and want always-on, expert-driven penetration testing with unlimited retests and on-demand attestation reports rather than a single annual snapshot

Continuous pentest Starter package from $15,000 (published)

Organizations - especially federal, state/local, and defense contractors - needing independent IT testing, compliance readiness, and verification and validation across a broad stack of US government and commercial frameworks

Organizations requiring expert compliance and cybersecurity services across multiple frameworks with executive CISO-level support

Engineering-led and high-assurance organizations that need deep security audits of code, cryptography, blockchain, and complex systems, well beyond a standard pentest

Startups, scale-ups, and defense industrial base companies that want managed compliance and security programs with expert practitioners, backed by a 100% certification success rate and G2 High Performer recognition

Startups and growing technology companies that want one founder-led partner for hands-on SOC 2 or ISO 27001 readiness, security testing, and ongoing security leadership

SOC 2 and ISO 27001 gap assessments from $3,000; penetration testing from $1,000; fractional CISO from C$3,000/month (published)

Organizations that want CREST-certified offensive testing and pragmatic security consulting from a widely recognized US practitioner team

Companies needing a full-service cybersecurity partner for SOC 2 readiness, PCI DSS QSA assessment, penetration testing, and vCISO - with expertise in managing the full audit lifecycle

UK organisations that want ISO 27001 certification support plus SOC 2 readiness, GDPR, and penetration testing from a single accredited consultancy

Small businesses in the Caribbean / Bahamas region seeking foundational SOC 2 readiness and cybersecurity consulting

Latin American organizations seeking a Spanish-language cybersecurity partner with 25+ years of experience across compliance certification and ethical hacking

Growing tech companies (Series A-C, 50-500 employees) that need an embedded security team to handle SOC 2, ISO 27001, and enterprise sales security reviews end-to-end

SaaS and technology companies seeking continuous automated + manual penetration testing integrated into CI/CD pipelines, with compliance scan support for SOC 2 readiness

DAST Scanner from $7 trial; Pentest plans: manual pentest pricing via custom quote (published partial pricing)

Fast-moving SaaS companies needing founder-led security audits and compliance readiness delivered in weeks, not months

SaaS Security Audit from $5,000, pay after delivery, fixed pricing (published)

UK-based companies seeking combined CREST-accredited penetration testing and compliance readiness, especially those on Vanta or pursuing ISO 27001 or SOC 2

Startups and SMBs across healthcare, AI/ML, and FinTech needing combined SOC 2 readiness and penetration testing with access to discounted GRC platform partnerships

Mid-market organizations across diverse industries seeking a single partner for SOC 2 readiness, penetration testing, vCISO, and multi-framework compliance consulting, with the attest work handled by affiliated CPA firm Compass Assurance Team

Organizations across Asia-Pacific, Middle East, and global markets needing multi-framework compliance consulting (SOC 2, PCI DSS, ISO 27001, HIPAA, GDPR) with a technology-assisted approach

Mid-market organizations across regulated industries seeking an integrated vCISO-led security team that combines GRC advisory, penetration testing, and managed security services

High-growth SaaS companies wanting a hands-on compliance team with prior Big 4 experience to get audit-ready 3x faster on GRC platforms

Compliance Sprint begins at $5K/mo (published)

Indian and Middle East-based technology companies seeking VAPT, SOC 2 readiness, and ISO 27001 consulting from a cybersecurity specialist

Organizations needing a broad range of GRC consulting, penetration testing, and training across SOC 2, ISO 27001, GDPR, and regulatory frameworks in the US, UK, and EU

Enterprises and SMEs in Fintech, Telecom, Healthcare, and E-commerce seeking CERT-In empanelled VAPT services, compliance audits, and an AI-driven vulnerability management platform

Large enterprises needing a globally recognized firm for incident response, penetration testing, and comprehensive cyber risk advisory across the full security lifecycle

Organizations needing rigorous, research-driven penetration testing backed by 20+ years of exploit development expertise, with deliverables suitable for SOC 2 and PCI compliance evidence

Enterprises needing a full-spectrum, CREST-accredited cybersecurity partner covering testing, vCISO, managed SOC, and compliance readiness across EMEA and globally

Large enterprises needing a top-tier security consulting partner with deep QSA/compliance expertise across PCI DSS, HIPAA, HITRUST, CMMC, and SOC 2 for program-level risk reduction

Organizations developing connected physical products or embedded systems that need deep hardware-level security testing: embedded firmware analysis, IoT architecture review, and hardware reverse engineering. P1sec operates from Slovenia, serving engineering teams across the EU building connected products for regulated and enterprise markets.

US government agencies and defense contractors needing penetration testing and vulnerability scanning as part of broader security research and threat surface reduction engagements, with deep experience in the federal contracting ecosystem.

Organizations that want to test their human attack surface through social engineering assessments — phishing, pretexting, physical tailgating — and build a security awareness program from the results.

Mid-to-large enterprises needing adversarial-focused red team testing, tabletop exercises, and SOC maturity assessments to validate that their security operations actually work under realistic attack scenarios.