# Cybersecurity services in Colombia | Slash Digital Lab

Source: https://slash-digital.io/en/cybersecurity/

Pentest and cybersecurity We assess, prioritize and help fix. Manual and automated pentest of web apps and APIs with a launch offer: no high or critical findings, COP $0.

- Guarantee COP $0 with no high findings
- Scope Web · APIs
- Retest 1 in paid assessments

Start a project
See the launch offer

In short
Slash Digital Lab provides cybersecurity services for companies from Bogotá, and honest security starts with actually looking: manual and automated testing on your real surface, with validated impact and clear priorities. If we find no high or critical vulnerabilities, the assessment costs nothing.

The full launch offer (COP pricing, scope, retest) lives on the Pentest Colombia page. For the new risks: deepfake fraud, prompt injection in AI agents and your AI supply chain.

What we deliver

## What the practice includes

From test to report, from patch to retest: security that ends in a fix.

01

### Web & API pentest

Manual plus automated, with reproducible evidence for every finding.

02

### Hardening

Configuration, dependencies, secrets and exposed surface.

03

### Incident response

Containment, analysis and reporting when something blows up.

04

### Human factor

Controlled phishing and social engineering, from COP $5M.

How we work

## How an assessment runs

-

### Scope

Domains, apps and APIs in a signed document; nothing outside contract.

-

### Assessment

Manual plus automated; every finding validated and reproducible.

-

### Report

Executive and technical: evidence, impact, priority.

-

### Retest

Verification after patching. Included in paid assessments.

Scope and deliverables

## The assessment, in writing

- **Scope:** Web apps and APIs, in a signed document.

- **Method:** Manual plus automated, hand-validated.

- **Severity:** CVSS and business context.

- **Report:** Executive + technical with evidence.

- **Retest:** 1 included in paid assessments.

- **Extras:** Controlled phishing from COP $5M.

Proof in production

## The offer, in writing

471.5M, attack attempts per year in Colombia (CRC/FortiGuard)

1.3M, attempts per day

COP $0, if no high findings

1, retest included in paid assessments

Read more

Veto · Private messenger

### E2E messaging without a phone number

Extreme-privacy messenger: local identity with no phone number, end-to-end encryption, PIN vault and multi-relay delivery: operators see ciphertext only, never plaintext.

Learn more →

Read more

Remittance network · Colombia → Venezuela

### From a legacy Web Forms app to an owned remittance platform

We replaced the ASP.NET system of a Colombia → Venezuela remittance network: 8 roles, mandatory MFA, every money movement in Postgres functions and 132 automated tests, in about six weeks.

Learn more →

Frequently asked questions

## The questions we hear often

**What if you find nothing?**
You keep the full report with medium, low and informational findings, at no cost.

**How is the price calculated?**
COP $0 with no high findings; COP $5M for one; capped at COP $9M. Details on the Pentest page.

**Do you test APIs?**
Yes, together with the web: that's where the expensive doors open today.

**Do you run simulated phishing?**
Yes, from COP $5M, with a report and team training.

**Do you help remediate?**
Yes: we can prepare an independent remediation proposal.

**How do you decide a finding is high or critical?**
With CVSS adjusted to your business context, and only if the finding is validated by hand and reproducible within the signed scope. Every high or critical finding ships with the steps to reproduce it, so your team can check it independently before it counts toward the price.

**Who do we talk to about a pentest, and in which language?**
Esteban Zuleta, co-founder: he takes your request, does the first read and confirms scope and pricing in COP. The service is delivered in Spanish, English and French, and the output is an executive and technical report with evidence, impact and priority.

**Do you assess mobile apps or other systems?**
The launch offer covers web apps and APIs; other scopes are quoted separately. What's in goes into a signed document listing domains, apps and APIs, and nothing outside the contract gets tested. For the human factor, controlled phishing and social-engineering tests start at COP $5 million.