A pentest is a controlled security assessment where ethical hacking experts simulate real attacks against your web applications, infrastructure and networks to find vulnerabilities before an attacker does. You receive a report with risk-prioritized findings and remediation recommendations.

The price depends on scope: number of applications or IPs, test type (black, grey or white box) and depth. With the GEIN360 quoting tool you get an estimate by ranges in minutes, with no commitment.

A typical web application pentest takes 1 to 3 weeks depending on complexity. Infrastructure or combined (web + network) projects may take longer. We confirm concrete timelines once you submit your request.

In black box the team gets no prior information (simulating an external attacker); grey box shares credentials or partial documentation; white box provides full access and source code for an exhaustive review. More information means broader coverage.

Tests are planned to minimize impact: execution windows are agreed, destructive tests in production are avoided without authorization, and communication is kept throughout. The confidentiality of your information is guaranteed.

Yes. We deliver an executive and technical report with every vulnerability, its criticality, exploitation evidence and remediation steps. It supports audits, ISO 27001 compliance and your technical team.