Request a callback

Security · Service

VAPT and penetration testing

Find what an attacker would find, and fix it before an auditor or a customer's security review does.

Timeline
2 to 4 weeks a test
Who does the work
Infofacility consultants, working remotely as part of your team
Price
On request

What you get

  • A scoped test of your web application, mobile app, APIs, cloud or network, following the OWASP testing guides.
  • Findings ranked by severity, each with its CVSS score, the steps to reproduce it and the fix.
  • A walkthrough of the results with your engineers, and critical findings reported the day they are found.
  • A retest after your fixes, and a letter your auditor or customer can rely on.

What can be tested

Web applicationsMobile appsAPIsAWS, Azure and Google CloudExternal networkInternal network

The scope is agreed on the scoping call and written down before the work starts.

How the work runs

Week 1

Scope and rules

The targets, test accounts, windows and contacts, agreed in writing before anything starts.

Weeks 1 to 3

The work

Manual testing backed by tools, with critical findings reported the day they are found.

Week 4

Report and walkthrough

Findings ranked by severity, each with the fix, walked through with your engineers.

After your fixes

Retest and letter

Each fixed finding retested, and a letter your auditor or customer can rely on.

The requirements it answers

The frameworks, laws and regulators whose requirements this work gives you evidence for.

ISO 27001:2022 A.8.8ISO 27001:2022 A.8.29SOC 2 CC7.1SEBI CSCRFRBI IT governance directions

Pricing

VAPT and penetration testing

Price on request

Scope sets the price. Book a scoping call for a written quote, in USD or rupees.

Book a scoping call

Book a scoping call

Tell Infofacility what you need and by when. A consultant calls you back to agree the scope and send a quote.

Book a scoping call

Your details are used only to answer this request. The button opens your email app with the request filled in.