Separate Retest

Fixed price. No sales call. Independent verification that previously reported vulnerabilities have been fixed, with an updated report you can hand to your auditor or customer.

This retest is for

• Baseline tier customers (Web or Infrastructure Baseline) and our Android pentest, which do not include a retest
• Reports from a third party: you had a pentest done by another provider and need the fixes independently verified

Bought Extended or Comprehensive? You don't need this: a free retest is already included (within 45 or 90 days).

Scope included

• Re-testing of up to 10 findings from one existing pentest report
• Each finding marked as Resolved, Partially resolved or Not resolved, with evidence
• Estimated effort: 1 tester-day

Deliverables

• Retest report (PDF) listing the status of every finding in scope
• Letter of attestation covering the retest

Good to know

• A retest verifies known findings only; it is not a new pentest and does not search for new vulnerabilities
• For third-party reports we need the original report (or the relevant findings) including reproduction steps. Findings that cannot be reproduced from the report are marked as "unable to verify"
• More than 10 findings? Buy the retest twice, or email us for a fixed price