Services and prices. All on one page.
Three checks, in the order companies usually need them: from the outside, inside your systems, and in your code. Prices exclude VAT.
We look at your company from the outside.
We check what anyone on the internet can see: your website, subdomains, server and email settings. We need no access to your systems.
Security check
Find out how an attacker sees your website, email and domain, and what to fix before it turns into invoice fraud, a data leak or downtime.
- The risk it reduces: fake invoices in your name, a customer data leak with the 72-hour duty to notify the Data Protection Inspectorate, and a webshop or booking system that goes down.
- How it differs from the free check: a free check looks at one threat at a time. The security check goes through the whole website and domain, and a person reviews and signs every finding.
- What you get: the report opens with a short summary for management. Each finding says what can happen, what to do and who fixes it. Your IT partner gets separate technical instructions. Plus one re-check after the fixes and 30 days of questions by email.
- Careful testing: we test the way an attacker would, but in moderation: we don't delete or change data, and we stop at once if the check disrupts the site. Make a backup before the check. The risks and your part are set out in the terms.
- Your part: order online and confirm the order and website address by email. No call or meeting needed. The report reaches you within 5 business days.
- Evidence for your board and clients: if a client of yours falls under the Cybersecurity Act, it is also responsible for its suppliers' security. The report shows you have had your website and email checked.
- Technically, we check: subdomains, certificates, server software, plugin versions, exposed admin areas, backups, leaked keys and email protection.
Website €249, webshop or application with logins €349. Pay by card now or by invoice.
Order a security checkSee a sample report (in Estonian)Monthly monitoring
New vulnerabilities are published every day. With monitoring, we re-check your website and domain every month and tell you right away when a threat appears that affects you specifically.
- Monthly summary: what changed, what's fine, what needs attention.
- Immediate alert: for a critical finding we let you know the same day.
- Simple fixes we make ourselves, if you give us permission.
For one website and domain; webshop or application €149 a month. Cancel at the end of any month.
I'd like monitoringEmail protection setup
If the free check or the security check shows that email can be forged in your domain's name, we set the protection up all the way. After that, other companies' email servers reject forged email sent in your name.
- Every sender covered: email, accounting software, newsletter, webshop. Correct SPF and DKIM records for each.
- DMARC step by step: we monitor the reports first, then tighten the rule until forged email is rejected. This takes one to two months.
- Written confirmation for your board once the protection is in place.
First domain €390, each additional €90. A domain that sends no email €149.
Ask about itWe look at your systems from the inside.
With read-only access only, we see how your applications, databases and communication channels are actually connected.
Deep infrastructure scan
Most small companies have no overview of what is connected to what, or who can reach where. We map it and tell you what to harden first.
- What we check: cloud accounts (AWS, Azure, Google Cloud), Microsoft 365 or Google Workspace settings, servers, database configuration and access (we don't read the data), backups and logging.
- What you get: a map of how your applications, databases and communication channels connect, and a prioritised hardening plan.
- Access: read-only, and you can revoke it at any time. No passwords are sent by email.
- Does not include attacks, workstations or social engineering.
- Starts only after the scope and the permission are signed.
Quoted after a short questionnaire: how many cloud accounts, users, servers and databases you have.
Ask for a quoteWe review your application's code.
Also suits apps built with Lovable, Bolt or Replit, before they go live.
Code scan
We check the code, its dependencies and the database permissions, looking for vulnerabilities, passwords and keys left in the code, and dangerous patterns. A person has checked every finding that reaches the report.
- Access: read-only access to the repository. Or you run our container yourself and send us the result, so you don't have to share the code.
- What you get: a report with findings in order of importance and, if you like, the fixes.
- Continuous re-scan: we re-check the code every month and review the results.
Small app up to 10,000 lines €490, up to 50,000 lines from €1,200, larger by quote. Continuous re-scan €150–300 a month per repository.
Ask for a quotePeople, rules and free checks.
Staff fraud awareness
A one-hour session for accounting and management: what invoice fraud and forged emails "from the director" look like, and what to do.
Readiness review
Whether the Cybersecurity Act and the General Data Protection Regulation (GDPR) apply to you, and where the biggest gaps are. The Cybersecurity Act, in force since 1 January 2026, makes companies responsible for their suppliers' security too. Does not replace legal advice.
Free checks and alerts
A check for the threat that is critical right now and an email spoofing check, using public information. An email alert when a new critical threat comes out.
Penetration test
A controlled attack simulation in a test environment. We'll add it once liability insurance and rules of engagement are in place.
We'll be honest about this too.
- Attacks on live systems we never carry out without signed permission.
- Workstation checks and social engineering are not part of our services for now.
- Legal advice. The readiness review shows gaps but does not replace a lawyer.
- 24/7 monitoring. Monitoring is monthly, not a real-time security operations centre.