Cybersecurity & complianceNew

Web application and API pentesting

We find your vulnerabilities before an attacker does.

What's included

  • Manual testing following OWASP
  • API testing
  • Executive and technical report
  • Re-test after fixes

What you get

  • Prioritised vulnerability report
  • Re-test certificate

What's not included

  • Code fixes (see Development hours bundle)

Timeline

1–2 weeks

Who it's for

  • Apps handling customer data or payments

Related services

How we work

  1. CallA 30-minute call to understand your goal and starting point.
  2. ProposalScope, timeline and price in writing, with no small print.
  3. DeliveryWork in phases, with reviewable deliveries and a single point of contact.
  4. SupportFollow-up and support after delivery, from Madrid.

Frequently asked questions

How do I pay?

By card on CaixaBank's secure gateway (Redsys), or by bank transfer for custom projects. Techólix never sees or stores your card details.

Is there a minimum term?

No. Monthly and annual services can be cancelled with 30 days' notice and stay active until the end of the paid period.

Do prices include VAT?

No. All prices exclude VAT (21%). The applicable VAT is calculated for your country at checkout.

Do you issue invoices?

Yes. Every payment has an invoice with VAT and your tax ID, ready for VeriFactu.

Where is data hosted?

On servers in Spain or the European Union, in line with the GDPR.

Checkout →