Expert service
Read the code that matters most.
Tools find the patterns. We read the code where security decisions are made, and explain each issue in your codebase's own terms.
Why teams book this test
- A big release is coming.A new payment, sign-in or data feature. Have an expert read the code that matters.
- Your scanner is noisy.Get the real issues, explained in your codebase's own terms.
- An audit is coming.Reports your ISO 27001 or SOC 2 auditor can use as evidence.
What we test
- Authentication and session handling
- Authorisation checks on every path
- Input handling and injection
- Cryptography and secret management
- Dependencies with known vulnerabilities
- Secrets committed to the repository
How an engagement runs
- ScopeA free 30-minute call. Targets, rules, dates.
- TestHands-on, to the agreed method.
- VerifyEvery finding confirmed with evidence.
- ReportImpact and a clear fix for each one.
- RetestWe check what you fixed.
Repeat every release or quarter, starting again from scope.
Why experts
What you receive
A human tests intent, chains attacks and signs the report as an independent third party. That is what the platform alone cannot give you.
- An executive summary written for leadership and customers
- Every finding with evidence, CVSS 3.1 score, impact and a fix your team can follow
- An independent third-party report. Reports your ISO 27001 or SOC 2 auditor can use as evidence.
- Retesting of fixed findings, agreed in the quote
- A walkthrough call with your team
The usual pentest, minus the usual pain.
Typical pentest firm
- PriceDay rates that grow with the job
- FindingsScanner output with your logo on it
- Follow-upBilled as a new engagement
- HandoverA PDF in your inbox
- Next yearStart again from zero
Cerberon experts
- PriceA fixed quote after a 30-minute call
- FindingsEvery finding backed by evidence, with what to fix
- Follow-upRetest or follow-up agreed in your quote
- HandoverA walkthrough call with your team
- Next yearKeep testing on your own server with the Cerberon platform
Questions about this service
Does our code leave our environment?
It does not have to. We can review on your infrastructure, including through a Cerberon instance you host.
Which languages do you review?
The common web, mobile and backend languages, including JavaScript and TypeScript, Python, Java, Go, C#, PHP, Kotlin and Swift. Ask about anything else.
Tell us what you need tested.
A 30-minute scoping call, then a fixed quote.