I list a fixed price for services with a clearly limited scope. For larger or individual projects, we first clarify what needs to be reviewed or done. I then prepare a specific proposal based on the agreed scope.
Main services
Web App Security Review
A practical security review of one smaller web application within a predefined scope.
The review covers one domainA human-readable name for an internet service, such as a website address. More or environment, up to 3 user roles and up to 5 main application flows. It focuses on authenticationIdentity verification. A service checks whether you really are who you claim to be. More, sessions, roles and permissions, forms and inputs, file uploads, APIs and common web security risks, including typical issues in applications developed quickly or with the help of AI.
You receive a prioritised report, remediation recommendations and a final consultation.
CZK 35,000 for the predefined scope
Approximately EUR 1,450.
Typical delivery: within 7 business days after the scope has been confirmed and the required access has been provided.
View the exact review scope
Request a security review
Custom Penetration Test
For larger, more complex or more sensitive applications and systems that do not fit within the predefined scope of the Web App Security ReviewA practical review of a web app focused on common flaws, login, permissions, sessions, and data hand... More.
The scope is based on the tested system, the number of roles and environments, APIs, administration interfaces, application flows, data sensitivity, the required depth of testing and the expected deliverables.
You receive an executive summary, prioritised findings, impact descriptions, technical evidence and remediation recommendations according to the confirmed scope.
Price based on the scope after a short initial scoping discussion.
Remediation, retesting and work outside the confirmed scope are not automatically included in the proposal.
View the custom penetration test details
Discuss the penetration test scope
Servers and operations
Infra Audit
A review of a Linux, VPS or Docker environment focused on access controls, SSH, firewall configuration, updates, exposed services, reverse proxies, backups, monitoring, logging and the handling of sensitive information.
You receive a practical list of risks and priorities: what needs to be addressed first, what should be added and where follow-up hardening makes sense.
Price based on the scope after a short initial discussion.
View the Infra Audit details
Request an Infra Audit
Server Hardening
Follow-up or standalone implementation work covering access controls, SSH, firewall configuration, updates, Docker, reverse proxies, TLS, backups, monitoring, logging or unnecessarily exposed services.
This is not long-term server administration. The scope of the changes and the implementation process are agreed in advance based on the current environment and the operational risk.
Price based on the scope and the current state of the environment.
Additional services
Hourly Sysadmin
For smaller, clearly limited tasks, diagnostics, configuration, technical consultations and follow-up work involving Linux, VPS, Docker or nginx environments.
CZK 3,500 / hour
Approximately EUR 145 / hour.
CZK 30,000 / 10 prepaid hours
Approximately EUR 1,240.
Package validity: 3 months.
View the service details
Request a specific technical task
Security Incident Assistance
Limited assistance with understanding an incident, identifying the first priorities and reviewing the most critical accounts, access permissions, servers or applications.
The service is available depending on current capacity. This is not a continuous 24/7 incident response service.
Price based on the situation and scope.
Describe the incident and check availability
Personal Consultation
An individual consultation focused on a specific situation: accounts, MFAVícefázové ověření (též vícefaktorové, anglicky multi-factor authentication) je v informat... More, password managersAn app that securely stores passwords and helps create a different strong password for every account... More, devices, privacy, access controls or practical personal or team opsecOperational security: habits that reduce how much sensitive information you reveal about yourself an... More.
CZK 3,500 / hour
Approximately EUR 145 / hour.
Minimum duration: 1 hour.
View the consultation details
Request a personal consultation
Corporate Training
Practical digital security training prepared around the specific team, its way of working and the relevant risks.
Price based on the scope, format and required preparation.
View the training details
Request corporate training
Travel to a client within the Czech Republic outside Prague:
CZK 2,000 / day, approximately EUR 85 / day.
EUR amounts are approximate. Invoices are issued in Czech crowns according to the prices listed above.
I am not registered for VAT.