To understand the cost of a web security audit, it is required to understand the complexity of the web, which fundamentally depends on the variables below:
Number or resources the application gets exposed to
The complexity and size of the website and if it is a transactional website that requires users with different roles and privileges
The parameters of the security review: black box (without any information on the application or the users to simulate an external attack), white box (with more information and with tests authenticated with username and password) or mixed
The specification to use a specific analysis methodology (OWASP, WASC, etc.) or defined security controls
The best approach to evaluate your case is for our security experts to access your web application so we can estimate the type and amount of work required to fully analyze the application.
From there, depending on the complexity of the application and the work that needs to be performed, the cost may range from €3,000 and €30,000. Other factors to take into consideration  may include the type of exercises, scope, amount of testing and service frequency. We advise our clients to choose the best approach for their needs in order to ensure the application is secure.