Code
Code analysis
Static analysis of one repository up to 50,000 lines (larger repositories are quoted). 48 hours from repository access for repositories up to 50,000 lines.
See what is includedPricing
A manual penetration test typically starts at $5,000. Velqor Stack starts at $300 with human-verified findings and a retest included.
Scans one target, one purchase, retest included
Code
Static analysis of one repository up to 50,000 lines (larger repositories are quoted). 48 hours from repository access for repositories up to 50,000 lines.
See what is includedWeb apps
Crawl and vulnerability scan of one web application (one hostname). 3 business days from scope confirmation.
See what is includedAPI
Endpoint discovery from the specification you provide (OpenAPI or Postman) or from traffic. 3 business days from specification hand-over.
See what is includedServers
External exposure scan of one host or public IP. 2 business days from ownership confirmation.
See what is includedBundle
One server, one web application, one repository and one API
Verified manual depth, authenticated, 2–3 tester days
One application, up to 3 user roles
One API, up to 50 endpoints
One application and its API
Continuous monthly, per target, cancel any time
The Tested-by badge and Statement of Testing are free on every product. They are issued after the retest, show the number of Critical and High findings still open, and expire 12 months after the retest date.
A manual penetration test typically costs $5,000 to $30,000 and takes one to three weeks. Velqor Stack Verified starts at $1,800 for 2–3 tester days with authenticated testing and business-logic review, and a per-scan test starts at $300. Every product includes human verification of Critical and High findings and one retest.
Scanner subscriptions such as Astra, Intruder, Detectify or HostedScan cost roughly $39 to $450 per month for unlimited automated scans with no human review. A Velqor Stack scan costs more per scan but includes a person verifying the Critical and High findings, request-level evidence, and a retest to confirm the fix. If you only want a dashboard, a scanner is cheaper; if you need to know which findings are real and whether the fix worked, that is what Velqor Stack sells.
No. A scan or Verified engagement is a single purchase. Continuous plans are monthly and can be cancelled at any time; cancellation takes effect at the end of the billing period.
A server scan at $300 or a web application scan at $350. The Full stack baseline bundles all four scans for $1,250, which is $300 less than buying them separately.
Yes. The Tested-by badge and the Statement of Testing are included with every product, issued after the retest, and valid for 12 months.
Prices in USD, excluding tax. Target ownership is confirmed and the scope agreed before any scan runs.
Request an assessment
We reply within one business day with a scoped proposal. No scan runs until ownership of the target is confirmed.