BlueBasket LabsFixed-scope package
Security & Compliance Launch
For SaaS companies facing their first serious security review: a pen test, a retest and a readiness programme in one engagement with a fixed price.
Included
- Penetration test of one primary web application and its API
- One retest and updated report
- Gap assessment against one framework (SOC 2, ISO 27001 or Essential Eight)
- Core policy set tailored to your business
- Control register and evidence checklist
- Remediation roadmap and auditor introduction
- Security questionnaire support for your first deals
Pricing
Fixed price, agreed after a short scoping call.
Audit fees are paid directly to your chosen auditor and are not included.
How it runs
A predictable sequence with a clear handover at each step.
- 1
Scope
Agree targets, environments, rules of engagement and what your customers or auditors need.
- 2
Test
AI-assisted testing with Shannon, validated and extended by a human tester.
- 3
Fix
Prioritised findings with reproduction steps and fix guidance; our engineers can help.
- 4
Retest
We verify fixes and issue an updated report you can share.
- 5
Audit-ready
Policies, evidence and controls mapped to your framework, ready for your auditor.
Not sure where to start?
Get in touch for a short call. We'll look at what your customers are asking for and recommend the smallest useful next step.