Cybersecurity & Digital Protection · Assessment
Tool-led scanning of one web application, with every finding checked by a person
From$599USD one-off
One payment. Work starts once we have confirmed your requirements.A one-off assessment of a single web application using recognised scanning tools, followed by manual checking of each result so the false positives are removed before you ever see them.
5 deliverables, listed in full below
Remote Setup
Carried out remotely by our team. Nothing is posted and no one visits.
REMOTE SERVICE
7–10 business days from receipt of signed authorisation and test credentials
Measured from the point everything under “what we need from you” is with us, not from the moment you pay.
A one-off assessment of a single web application using recognised scanning tools, followed by manual checking of each result so the false positives are removed before you ever see them.
Where the Website Security Audit reads configuration, this exercises the running application, including logged-in areas when you supply test credentials. It is scan-led with human verification. It is not a penetration test: we do not exploit what we find, we do not attempt to move deeper into your systems, and we are not a licensed security testing firm. Testing does not start until written authorisation is signed.
You run a web application that takes logins, payments or customer records, and nobody has ever pointed a scanner at it or read what one would say.
If that does not describe you, this is probably the wrong product. Tell us and we will point you at a better fit rather than sell you the nearest one.
The concrete things that exist at the end and that you own.
The work covered by the figure in the buy box, at no extra cost.
Not seeing something you expected? Check what you are not buying before you order.
Everything listed here is delivered as part of this product. Nothing on this list is aspirational.
The delivery sequence from order to handover.
You sign a written authorisation naming the systems, the dates and the person authorising. Nothing is scanned before it is returned.
We fix which hosts and paths are in scope, what is out of bounds, and when the scan runs. Your host is notified where their terms require it.
Unauthenticated and authenticated passes run against the agreed target, at a rate tuned not to overwhelm it.
Every raw result is checked manually. Anything we cannot reproduce is discarded rather than padded into the report.
You receive the report and a walkthrough call. When your fixes are in, we retest the closed findings once.
Stream Edge Solutions ships nothing. Every package on this site is carried out and handed over remotely — this is exactly what happens after you order.
Carried out remotely by our team. Nothing is posted and no one visits. Typical turnaround: 7–10 business days from receipt of signed authorisation and test credentials.
Full detail of how work is handed over, what happens if requirements are outstanding and how order records are kept is in the Delivery & Fulfilment Policy.
Nothing starts until these are in place, and the turnaround above is measured from that point — not from the moment you pay.
Business needs this addresses: Improve IT infrastructure
Just as plainly as the list above: the things this package is not.
Anything outside the scope above is quoted separately, in writing, before it is carried out. Nothing is added to your bill without your agreement.
Scanning a system without the owner’s permission is illegal in most places, regardless of intent. We will not begin until we hold a signed authorisation naming the systems, the dates and the person authorising it. If the application sits on infrastructure you do not control, we need the controlling party’s agreement too.
No. A penetration test involves exploiting findings and chaining them together, usually by a licensed testing firm, and we are not one. This is automated scanning plus manual verification, which catches the common and well-documented issues at a fraction of the cost. If you need a formal penetration test, say so and we will tell you plainly that this is not it.
It is possible. Scanners submit forms and follow links, so they can create test records, trigger emails or put load on a fragile server. We prefer to run against a staging copy for that reason, and where we must use production we agree a window, tune the rate and ask you to take a backup first.
Then the report says so, and that is a legitimate result rather than a failed engagement. The price covers the work of assessing, not a quota of findings. A clean report means the common issues were not present on the day we looked, which is not the same as the application being secure.
What happens if you change your mind, and what happens to money already paid.
The full terms, item type by item type, are in the Refund & Cancellation Policy. How the work reaches you is covered by the Delivery & Fulfilment Policy.
We would rather point you at the right thing than sell you the nearest one. Ask us before you buy — no obligation.
Others that solve nearby problems, in case this is not quite the right fit.
Security · Assessment
A read-only review of one website and its hosting, written up and ranked by risk
Price
$349one-off
Security · Hardening
The fixing job: headers, permissions, versions and configuration put right
Starting from
$499one-off
Security · Assessment
Monthly scanning and patch advisories for systems your own team keeps up to date
Price
$129per month
Or see all 11 in Cybersecurity & Digital Protection.