Web & API pentest
Manual plus automated, with reproducible evidence for every finding.
We assess, prioritize and help fix. Manual pentest of web apps and APIs with a launch offer: no high or critical findings, COP $0.
Honest security starts with actually looking: manual and automated testing on your real surface, with validated impact and clear priorities. If we find no high or critical vulnerabilities, the assessment costs nothing.
The full launch offer —COP pricing, scope, retest— lives on the Pentest Colombia page.
From test to report, from patch to retest: security that ends in a fix.
Manual plus automated, with reproducible evidence for every finding.
Configuration, dependencies, secrets and exposed surface.
Containment, analysis and reporting when something blows up.
Controlled phishing and social engineering, from COP $5M.
Domains, apps and APIs in a signed document; nothing outside contract.
Manual plus automated; every finding validated and reproducible.
Executive and technical: evidence, impact, priority.
Verification after patching — included in paid assessments.
| Scope | Web apps and APIs, in a signed document. |
|---|---|
| Method | Manual plus automated, hand-validated. |
| Severity | CVSS and business context. |
| Report | Executive + technical with evidence. |
| Retest | 1 included in paid assessments. |
| Extras | Controlled phishing from COP $5M. |
You keep the full report with medium, low and informational findings, at no cost.
COP $0 with no high findings; COP $5M for one; capped at COP $9M. Details on the Pentest page.
Yes, together with the web — that's where the expensive doors open today.
Yes, from COP $5M, with a report and team training.
Yes: we can prepare an independent remediation proposal.
Web & API pentest with guaranteed results: no high findings, COP $0.
Learn more→ SoftwareWe replace SaaS licenses with owned products your team controls.
Learn more→ DataPipelines, warehouses and data quality that survive production.
Learn more→ AIApplied AI for real operations: agents, RAG, vision, voice and automation.
Learn more→Tell us your challenge. We reply within 24 hours with an honest first read: if we can help, we'll say how; if not, we'll say who can.
I reply personally. No endless forms, no canned replies.