Pricing

Human-verified testing from $300 per scan.

A manual penetration test typically starts at $5,000. Velqor Stack starts at $300 with human-verified findings and a retest included.

Scans one target, one purchase, retest included

Code

Code analysis

Starting at$350per scan

Static analysis of one repository up to 50,000 lines (larger repositories are quoted). 48 hours from repository access for repositories up to 50,000 lines.

See what is included

Web apps

Web application testing

Starting at$350per scan

Crawl and vulnerability scan of one web application (one hostname). 3 business days from scope confirmation.

See what is included

API

API testing

Starting at$550per scan

Endpoint discovery from the specification you provide (OpenAPI or Postman) or from traffic. 3 business days from specification hand-over.

See what is included

Servers

Server scans

Starting at$300per scan

External exposure scan of one host or public IP. 2 business days from ownership confirmation.

See what is included

Bundle

Full stack baseline

One server, one web application, one repository and one API

  • All four scans in one engagement
  • One report, one consultation, one retest covering all four
  • Human verification of every Critical and High finding
  • Tested-by badge after the retest
All four scans$1,250$1,550 separatelyRequest a scope

Verified manual depth, authenticated, 2–3 tester days

Web application — Verified

One application, up to 3 user roles

$1,800per target
  • Authenticated testing and business-logic review
  • 2–3 tester days
  • Executive and technical report, consultation, retest
  • Statement of Testing and badge
Request a scope

API — Verified

One API, up to 50 endpoints

$2,200per target
  • Authenticated, per-endpoint authorisation testing
  • Chained-request and business-logic checks
  • Executive and technical report, consultation, retest
  • Statement of Testing and badge
Request a scope

Continuous monthly, per target, cancel any time

Monitor

$249per month, per target
  • Monthly scan of one target
  • Dashboard and patch tracking
  • Email alert on any new Critical or High
  • Cancel any time
Start a plan

Add-ons

Additional user role (Verified web)
+$300
Additional host, hostname, repository or API in the same engagement
+50% of that scan
Expedited start within 2 business days
+25%
Post-quantum readiness review (crypto inventory and migration plan)
from $2,500, scoped

The Tested-by badge and Statement of Testing are free on every product. They are issued after the retest, show the number of Critical and High findings still open, and expire 12 months after the retest date.

Comparing the options

How does Velqor Stack compare to a penetration test?

A manual penetration test typically costs $5,000 to $30,000 and takes one to three weeks. Velqor Stack Verified starts at $1,800 for 2–3 tester days with authenticated testing and business-logic review, and a per-scan test starts at $300. Every product includes human verification of Critical and High findings and one retest.

How does Velqor Stack compare to a vulnerability scanner subscription?

Scanner subscriptions such as Astra, Intruder, Detectify or HostedScan cost roughly $39 to $450 per month for unlimited automated scans with no human review. A Velqor Stack scan costs more per scan but includes a person verifying the Critical and High findings, request-level evidence, and a retest to confirm the fix. If you only want a dashboard, a scanner is cheaper; if you need to know which findings are real and whether the fix worked, that is what Velqor Stack sells.

Is there a contract?

No. A scan or Verified engagement is a single purchase. Continuous plans are monthly and can be cancelled at any time; cancellation takes effect at the end of the billing period.

What is the cheapest way to start?

A server scan at $300 or a web application scan at $350. The Full stack baseline bundles all four scans for $1,250, which is $300 less than buying them separately.

Is the badge free?

Yes. The Tested-by badge and the Statement of Testing are included with every product, issued after the retest, and valid for 12 months.

Prices in USD, excluding tax. Target ownership is confirmed and the scope agreed before any scan runs.

Request an assessment

Tell us what you need tested.

We reply within one business day with a scoped proposal. No scan runs until ownership of the target is confirmed.

  • Web, app and API testing
  • Code analysis and server scans
  • Ongoing patch management
  • Post-quantum readiness review

Enter your name.

Enter a valid email address.

Hostnames can wait for the scoping call.

Request sent. We'll reply within one business day with a scoped proposal.