What an AI attacker finds tomorrow. Validated by
an expert, today.
Automated tools and AI agents will soon probe companies' attack surface around the clock. The Red Teaming Starter brings that forward: our security expert attacks your systems from the outside with AI support — and shows you the weaknesses before anyone else finds them. Fixed price €2,500.
Tomorrow's attacker is automated
A targeted attack on a mid-sized company used to cost attackers time and skill. That is changing: AI-assisted tools increasingly handle reconnaissance, target selection and first attack attempts on their own — against many targets at once and without pause. What is overlooked today because nobody bothers will be found systematically tomorrow. The Red Teaming Starter brings that perspective forward. Our expert works with the same AI tools an attacker will soon use — but they decide, review every finding by hand and judge what it means for your business. You learn what an automated attacker can discover about your public systems while you can still act on it.
The starter — and what goes beyond it
An affordable entry from the outside, with clear extensions on request
The starter in numbers
Fixed price, fixed scope, no small print
How the starter runs
Controlled, documented, with a fixed result at the end
Scoping and objective
In a short call we agree which public systems are in scope and which single objective is tested. Not 'check security', but a concrete question — for example: can an outside attacker reach the protected export endpoint?
Authorisation and rules
Written sign-off, the exact target systems, clear boundaries, a defined emergency stop and named contacts on both sides. No test begins without this basis.
Attack from the outside
Our expert probes the approved attack surface — with AI support for reconnaissance and selection, but with a human decision at every step. Priority weaknesses are validated by hand and followed to the agreed proof point. No destructive tests, no bulk download.
Independent review
Every finding is reviewed by a second expert before it enters the report. The German security lead checks the conclusions, rates severity in business context and signs off the report.
Report and readout
Within 10 business days you receive a report with a management summary, technical findings and an editable action register — plus a 60-minute results meeting. What was tested and what was not is stated explicitly.
Optional retest
Once your team has fixed the findings, we verify on request that the corrections hold — for a fixed €300, requested within 30 days of the report.
Fixed scope, honest limits
The starter is deliberately small and affordable. For that to work, what is included — and what is not — is spelled out.
Included in the starter
- Attack from the outside, no credentials, from an attacker's perspective
- One domain, up to five systems, one public application, one objective
- Security expert with AI support instead of raw scanner output
- Manual validation of priority findings to the agreed proof point
- Report with an action register and a 60-minute results meeting
- Independent second review, signed off by the German security lead
- Optional retest at a fixed €300
Not in the starter
- Internal attacks and assumed breach — on request as a separate service
- Authenticated areas, user roles, tenant separation — separate scope
- Phishing and social engineering — separately commissioned
- Measuring your detection — a separate exercise with log access
- Destructive tests, denial of service, bulk data extraction
- TLPT under TIBER-DE or DORA — that requires accredited providers
The starter answers one outside question for a fixed price. If your environment is larger, or you need authenticated areas, roles or an internal view, we focus the starter on what matters most or turn it into a quote for a broader pentest — we tell you in scoping, before any extra effort begins.
Why the starter
Low price, a real attacker, a result you can act on
An expert with AI, not just a scanner
Scanners produce lists full of false positives. Our expert uses AI for speed and breadth, but decides themselves, validates every finding by hand and judges what it really means. A human is always accountable.
The view from outside
You see your company the way an attacker does who knows nothing about you except what is publicly reachable — exactly the vantage point the next wave of attacks comes from.
A result to act on
Not an 80-page raw dump, but a prioritised action register and a clear answer: the objective was reached — or not, and why. With an optional retest that confirms the fix.
Reviewed and accountable
Every report goes through a second expert review and is signed off by the German security lead. Delivery is handled by the team in Vietnam, accountability visibly in Germany.
Red teaming pricing
A fixed price for the starter, individual pricing for everything beyond
Red Teaming Starter
The external entry at a fixed price
- Attack from the outside, no credentials
- One domain, up to five systems, one objective
- Expert with AI support
- Report with an action register and a results meeting
- Second review, signed off by the German lead
- Report in 10 business days
Retest
Confirmation of your fixes
- Re-check of the selected findings
- Request within 30 days of the report
- Addendum to the original report
- Clearly marked: fixed, partial, open
- Bookable independently of the starter
Beyond the starter
Assumed breach, phishing, detection, campaign
- Internal foothold (assumed breach)
- Social engineering and phishing
- Measuring your detection with log access
- Authenticated areas and user roles
- Multi-week campaigns, a few per year
- Scope and price after scoping
Frequently asked questions about the starter
What customers want to know before the first test
A one-off external security test at a fixed price of €2,500. Our expert attacks a clearly bounded public attack surface from the outside — no credentials, with one agreed objective. You get a reviewed report with prioritised findings, an action register and a 60-minute results meeting. No subscription, no hidden costs.
See your systems before the next AI attacker does
In a short scoping call we confirm the target systems and the objective. After that you know exactly what gets tested — for a fixed €2,500, with a report in 10 business days.