// web security for SMEs

Find the holes in your website before someone else does.

Penetration tests and security reviews for the websites and web platforms SMEs depend on. Fixed prices, findings your developers can actually fix, and a retest to prove it's resolved.

See packages and prices Book a free call

// packages

Fixed scope. Fixed price. Retest included.

Prices exclude VAT. Final quote after a free 20-minute call.

Website Check

from €490

Company websites, WordPress and small online shops. CMS and plugins, configuration, TLS, headers, exposed admin panels and forgotten files. A prioritised list of fixes.

report + results call

Choose

core service

Essential Web Pentest

from €1,490

Manual testing of one business web application with up to two user roles: access control, authentication, sessions, injection and business logic.

report + call + retest

Choose

Continuous Monitoring

from €99/month

Monthly external scan of your website and exposed services, alerts on new risks and a quarterly manual review.

monthly report · alerts · quarterly review

Choose

Web + API Pentestquoted per scope · platforms with several user roles

NIS2 Quick Assessmentquoted per scope · gaps + action plan

// what you get

A report management understands and developers can act on.

Executive summary

One page, plain language: overall risk, what matters most and what to do next.

Technical findings

Each with a CVSS severity, steps to reproduce, impact and a concrete fix.

Results call

We walk your team through the findings and answer your developers' questions.

Retest letter

Every finding verified as fixed — a letter you can share with customers, insurers or auditors.

→ Ask for a sample report

// NIS2

Covered by NIS2 — or supplying someone who is?

Portugal's Decree-Law 125/2025 requires covered entities to manage cybersecurity risk — including the security of their suppliers. If a larger customer is asking you for evidence, we help you answer with facts.

Are you in scope? Applicability check
Gap list against the required measures
Prioritised 3–6 month plan
Pentest reports as technical evidence

Know where you stand.

Tell us what you want tested. We'll reply with a fixed scope and price proposal.