MEIDAY
עברית
MEIDAY

How much does a penetration test cost?

The price depends on the system and the test scope, not on the number of findings. Answer a few short questions and get an instant price estimate, including VAT.

Price calculator

What would you like tested?

The system's APIs are included in the price, within the scope agreed in advance.

How many separate systems?

For pricing, a system is a website or app with a defined business function. Several domains that point to the same system may count as one, depending on the test scope.

How many types of user does it have?

A user type is a separate set of permissions. For example, a customer and a system admin are two user types.

Finding validation by an OSCP tester

Included in every test, without the add-on

  • External testing of the agreed systems with autonomous testing tools
  • MEIDAY goes over the report before delivery to check that everything looks right. Without the add-on, findings are not validated one by one
  • A detailed report and one free focused retest within 45 days

What the add-on adds

An OSCP-certified tester tries to reproduce each finding by hand, up to 10 per system, and records in the report whether it reproduced. Beyond that, the price is set in the written quote.

Request a quote

Step 1 of 3

You have not calculated a price yet. Calculate a price

Where to reach you

We use your details only to handle your request and prepare a quote. They go to our hosting and email providers, Cloudflare, Google and Resend, which may process them outside Israel. You have no legal duty to give them, but without them we cannot reply. Responsible for the data: מיי דיי (MEIDAY). To access, correct or delete your data: team@meidaysec.com.

Full notice

We use your details only to handle your request and prepare a quote. We will not send you marketing email. Responsible for the data: מיי דיי (MEIDAY).

You have no legal duty to give us these details; it is your choice. Organization, name and email are required in the form, because without them we cannot reply. Phone and notes are optional.

The site runs on Cloudflare, which stores your request in the site’s database and also provides the Turnstile bot check. Replies we send you go out through Resend, an email delivery provider, and replies you send us reach our Gmail inbox at Google. These providers may process data outside Israel.

We keep your request details for up to 12 months after our last contact, subject to the retention duties that apply to us. After that we delete them from the systems we control. You can ask us to access, correct or delete your personal data, as the law allows, at team@meidaysec.com. privacy policy

What would you like tested? (optional)

For example the website address or what the system does. No passwords, access keys, internal addresses or vulnerability details.

Send

Sending a request does not commit you to anything and does not authorize any testing.

Contact: team@meidaysec.com

Price list

Prices per system, including VAT
What is testedWhat the package coversIncl. VATOf which VAT
Simple public websiteOne website with no login: one domain and up to 10 subdomains, in one environment₪1,990₪303.56
App or business systemOne system and its APIs: up to 100 API operations, up to 3 hostnames and up to 2 user types, in one environment₪4,490₪684.92
Finding validation by an OSCP tester, public websiteAdd-on per website: an OSCP-certified tester tries to reproduce up to 10 findings within the defined scope+₪1,490+₪227.29
Finding validation by an OSCP tester, appAdd-on per system: an OSCP-certified tester tries to reproduce up to 10 findings within the defined scope+₪2,900+₪442.37
Focused retestOnce, within 45 days of report delivery, on the reported findings in the same scopeIncluded
Complex scopeMore than 3 systems, more than 2 user types, a larger scope than the package, several environments, connected systems, or not clear yetTailored quote

How the price is set

  • Each system is priced separately, and the calculator shows the price for the number of systems you select.
  • The system’s APIs are not priced separately when they are part of the agreed scope. A standalone API counts as one system.
  • A website with user login is tested like an app, so the app package applies.
  • An API operation is one REST path, or one GraphQL query or mutation. If kickoff shows the scope is larger than the package, we update the quote before we start.
  • When there is not enough information to price honestly, we first learn about the system and then send a tailored quote.
  • Once you approve the quote in writing, the price stays fixed as long as the scope of work does not change.

An instant price estimate for the scope you selected. The final price is set in a written quote, after we verify the system details and you approve the test scope in writing.

Not included unless agreed: source code review, internal networks, social engineering and a comprehensive manual test of the whole system. The full out-of-scope list

See a sample reportHow is the test done?

Display preferences

Your preferences are saved in this browser only. You can use the site without this panel. Found an accessibility problem? Contact us.

Text size
Background
Contrast
Underline links
Animation
Accessibility statement