The catalogue
One-off pentest or annual programme: what each evaluation includes, what distinguishes the two services, and what neither of them is.
The two services#
| One-off pentest | Annual programme | |
|---|---|---|
| Scope | One named application, its associated APIs, one agreed environment | The same application, over twelve months |
| Full evaluations | One | Two: one at the start, one around six months or on an agreed date |
| Correction retests | Two batches within sixty days of the report | Two batches within sixty days of each report |
| Payment | Single payment | Prepaid, or twelve fixed instalments |
| Commitment | None after delivery | Twelve months, no automatic renewal |
What each evaluation includes#
- scoping: scope, environment, Guidance;
- AI-assisted testing within the authorised scope;
- automated verification of evidence;
- the frozen report, exportable as PDF;
- the presentation of results;
- two correction retest batches within sixty days of the report.
Retest batches are distinct from evaluations: they never consume the second annual evaluation.
Limits of the catalogue#
- The catalogue offers neither active monitoring nor a monthly subscription that can be cancelled at any time.
- An order names one application; it does not cover a "whole network". Internal scans are enabled by SpectrAI on the client space after agreement on the scope and the relay deployment.
- Bare IP addresses, Git repositories, uploaded code and CI pipelines are not covered.
Prices#
Prices are not published on the site. They are displayed at the time of ordering, in the application, after confirmation of the application and the environment. A price edition is frozen in the accepted contract: a later price change never modifies a signed contract.
For partners#
A partner firm orders for an identified client and application. SpectrAI invoices the partner, who sets its resale price and invoices its client. See Partner orders.