Cybersecurity Services for Startups: Express Scan, Base Audit, and Penetration Testing

Hi everyone,

A while back I posted here about an idea for a quick security workflow for indie projects and startups. Since launching tlsguard.tech, I've settled on three tiers — from a fast automated check before release to a full manual pentest.

Express scan — $50
I run an automated scanner against the public site (Nmap + a couple of basic web scanners) to catch the obvious stuff in a few minutes: open ports, outdated software with known CVEs, sloppy HTTP headers. You get a list of what to fix before launch.

Base security audit — $250 (most popular)
This is a deeper look at the web app and key APIs for common high-risk vulnerabilities, based on the OWASP Top 10. Not just automation here — I look at the attack surface, critical endpoints, and business logic: how access control is set up, how sensitive data gets passed around and stored. You get a prioritized list of what to fix first.

Comprehensive audit / pentest — $1,000
This is a full manual grey-box pentest, no automation — I try to act like a real attacker would. I go through every module and API, hunt for logic flaws (broken access control, privilege escalation, transaction logic issues), inspect traffic with Burp Suite and Wireshark, and where possible actually try to exploit what I find. You get a detailed report on attack vectors plus a year-ahead roadmap for fixing things.

I only take on a handful of projects a week at a time — otherwise I can't dig into each one properly.

All the details are on tlsguard.tech. If you've got thoughts on pricing or what's included in each tier, I'd genuinely like to hear them in the comments.