Pricing

Website security audit pricing

Real experts, fixed prices. Pay once, with no subscription and no sales call.

5.0 out of 5from 3 customer reviews

Circuit

Find every security hole
$49one-time
  • Full manual audit of 1 website
  • Written report with clear fixes
  • A real person to talk to
Get Circuit

Paid once. 14-day money-back guarantee.

Upgrade to Signal within 3 days and we credit what you paid.

Most popular

Signal

Find it, fix it, watch it
$2993 months
  • Everything in Circuit
  • We fix high and critical issues
  • Security cover as you ship
Get Signal

Paid once. 14-day money-back guarantee.

Enterprise

Many sites, apps or APIs
Custom
  • One scoped engagement
  • Fixes and up to 12 months of cover
  • A dedicated security lead
Talk to us

No obligation. Fixed quote in USD.

Not ready to buy?

Run a free instant scan of your website first. No login, no card.

Scan free

All prices in US dollars (USD). Paid once through Stripe’s secure checkout. No subscription.

Every paid plan includes

  • Testing by a real person, who finds logic and access problems that scanners miss.
  • A written report you can share, with severity, evidence and exact fix steps.
  • Legal, authorized testing. We verify you own the site and record your approval first.
  • A 14-day money-back guarantee if testing has not started.
  • Real support from the people who tested your site.

What happens after you pay

  1. 1

    Verify your website

    Prove you own it by email, DNS, file or meta tag. It takes about 5 minutes.

  2. 2

    Approve testing

    A quick recorded approval keeps the audit legal.

  3. 3

    An expert tests it

    A senior tester works through your site by hand.

  4. 4

    Get your report

    Your full report arrives in your dashboard and inbox, usually within 5 business days.

How we compare to a traditional pentest

How much does a website security audit cost? Traditional penetration tests cost $5,000 to $20,000 or more because they are built for large companies. Bug Circuit offers the same kind of manual testing for small websites: a free instant scan, a $49 full manual audit, or $299 for the audit plus fixes and 3 months of cover.
Traditional penetration test compared with Bug Circuit
Traditional pentest firmBug Circuit Circuit ($49)Bug Circuit Signal ($299)
Price$5,000 to $20,000+$49 one-time$299 for 3 months
TestingManualManual, by a senior testerManual, plus re-tests after fixes
Time to start2 to 6 weeks of scopingRight after checkoutRight after checkout
FixesUsually extraFix steps in the reportWe fix high and critical issues with you
Best forLarge companies and complianceSmall sites, WordPress, SaaSTeams that want it fixed

Frequently asked questions

Why is Bug Circuit $49 when a penetration test usually costs $5,000 or more?
Big pentest firms charge for scoping calls, project managers and paperwork. We keep the scope tight and focused on small websites, so one senior tester can do real manual testing at a fixed price. If your project is very large, we will tell you honestly.
Is there an affordable penetration test for small businesses?
Yes. That is why Bug Circuit exists. Circuit is a real, hand-tested audit for a fixed $49. Signal adds fixes and 3 months of cover for $299. You never need a sales call to see the price.
Do you offer plans for several websites?
Yes, that is Enterprise. Circuit and Signal each cover one website. If you have several sites, apps or APIs, we scope one engagement around all of them. Talk to us about Enterprise
What currency are prices in?
US dollars (USD) for every customer. You pay once through Stripe. Neither plan is a subscription. If your card uses another currency, your bank converts it.
Is this a real manual test or an automated scan?
A real security expert tests your site by hand. They look for logic flaws, access problems and weak logins that scanners miss. Every finding is checked and written up by a person. See the difference
Is there a money-back guarantee?
Yes. You can get a full refund within 14 days of paying, for any reason, as long as testing has not started. Read the refund policy.
What do I receive?
A written report of every issue we find, with its severity, the evidence, what it means for you and how to fix it. On Signal we also fix the high and critical issues with you. See a sample report
When do I get my report?
Usually within 5 business days after you verify your website and approve testing. We email you the moment it is ready.
What if you find nothing serious?
Then your report says so. A clean report is still useful: it is proof that a person tested your site and shows what was checked.

Keep reading

Not sure yet? Start with the free scan

See what attackers can see first. No login, no charge, no impact on your site.

Ready for the full manual audit? See pricing