Cybersecurity · Penetration testing (pentesting)

Penetration testing: we find your flaws before others do

Authorised penetration testing (pentesting) and security reviews for small businesses: we tell you what is wrong, how much it matters and how to fix it, in plain language.

Request your penetration test See prices

Published prices, plus VAT. Free second review.

Penetration testing

Penetration testing (pentesting) for your business

A penetration test simulates, with your permission and under control, what a person trying to get into your website or systems would do. You see where you are exposed and close the gap before someone else uses it.

  • Websites and online shops

    Login, forms, basket, payments and user permissions: we test every door a visitor can see.

    from €199+ VAT

  • Apps and APIs

    Your web or mobile app and the APIs behind it: authentication, exposed data and access control.

    from €489+ VAT

  • Office network and Wi-Fi

    Computers, Wi-Fi, printers, cameras and remote access: what you would see if someone got onto your network.

    from €399+ VAT

  • Servers and cloud

    Servers, hosting and cloud services: configuration, access and open ports.

    from €399+ VAT

  • Email and domain

    We check that nobody can impersonate your company by email: SPF, DKIM and DMARC.

    €99+ VAT

  • External and internal testing

    External: from the internet, as a stranger would. Internal: from inside your network, as if someone had already got in. You can ask for one or both.

    Fixed quoteafter a free analysis

How we work: we follow recognised industry references, such as OWASP for web applications and PTES for carrying out penetration tests, adapted to the size of your business.

What you get: a clear report with the risks ranked by priority (critical, high, medium or low), how to fix each flaw and a free second review once you have fixed it.

Always with permission: before we start we sign a written authorisation setting out the scope of the tests, and we run them on the agreed dates and times without stopping your business. Prices, excluding VAT, are in the services table; anything without a published price gets a fixed quote after a free analysis.

Request your penetration test

Services and prices

Reviews with clear prices

Pick the one that fits what you want to protect. All prices exclude VAT.

  • Security review of your website

    We look for the flaws anyone trying to get into your site could see, and explain how to close them.

    from €199+ VAT

  • Full audit of a website, shop or app

    Covers forms, login, payments and APIs: the whole journey of your users and your data.

    from €489+ VAT

  • Review of systems and office network

    Servers, Wi-Fi, computers, backups and remote access.

    from €399+ VAT

  • Email and domain review

    We check that nobody can impersonate your company: SPF, DKIM and DMARC.

    €99+ VAT

  • Continuous monitoring

    An automatic review every month and a notice if anything new appears.

    €29/month+ VAT

  • Fixing the flaws

    A fixed quote after the report, per flaw or as a package.

    from €59/h+ VAT

Every report includes what was found, the severity of each flaw, how to fix it in plain language and a free second review once it is fixed.

Risks for your business: each flaw comes with what could happen if someone exploited it (theft of customer data, fraud, site downtime, impersonation or GDPR fines) and how urgent the fix is.

Want us to fix them? We give you a fixed quote with the report, per flaw or as a package (from €59/hour or a fixed price).

With your permission

Only with the owner’s permission

We only review websites and systems of people who prove they own them or hold the owner’s authorisation, and always with a signed authorisation.

That way you are protected and the test is lawful: every step is agreed in writing before we start.

For systems run by a provider (hosting, cloud) we follow their testing rules.

How we work

From your first email to the report

  1. You write to us

    Email info@novantrek.com with what you want reviewed.

  2. We verify it is yours

    You prove ownership in one of three simple ways. Go to the verification tool

  3. We sign an authorisation

    In writing: what is tested, what is left untouched, dates and times, and who is responsible if something happens.

  4. We run the tests

    On the agreed dates, taking care not to interrupt your business.

  5. We deliver the report

    And go through the fixes together.

Ownership check

Prove the domain is yours

Before any test we check that the domain is yours. There are three ways to do it; one is enough. The tool works out your code and checks the result.

  • A. DNS TXT record

    Create a TXT record at _novantrek-verificacion.YOURDOMAIN with the code as its value.

  • B. File on your site

    Publish the code at https://YOURDOMAIN/.well-known/novantrek-verificacion.txt.

  • C. Tag on the home page

    Add <meta name="novantrek-verificacion" content="CODE"> to your home page.

Systems without a domain

For office networks, internal servers or IP addresses: an authorisation signed by the company’s representative plus proof of ownership (the provider’s contract or an invoice) and, if needed, a check in person.

Get my verification code

Our websites

The websites we build come protected as standard

Always-encrypted connection (HTTPS with HSTS): what is sent cannot be read or changed along the way.

Security headers that block code injection, clickjacking and loading of third-party content.

Hosted on the Cloudflare network, with protection against attacks that try to take a site down.

Custom-built, lightweight and free of third-party plugins: fewer doors to break in through.

Continuous monitoring: we keep checking security headers, certificates, exposed files and security notices, to catch any change in time.

Free security fixes: if a security flaw appears in a website we built, we fix it at no cost.

Frequently asked questions

Questions about penetration testing and security reviews

What is a penetration test?
It is a simulated, authorised attack on your website, systems or network to find the flaws that someone from outside (or inside) could exploit and to see how far they would get. It is also called pentesting. At the end you receive a report with the risks ranked and how to fix them.
Is a penetration test legal?
Yes, with the written authorisation of the system’s owner. That is why we always ask for it and sign it before the first test.
Can a penetration test stop my business?
We plan the tests so they do not affect your website or systems and we agree the times with you. If anything worries you, we put it in writing in the authorisation.
What are the risks of the tests?
Testing can cause some slowness or a brief service glitch. To avoid that, we agree on low-traffic times, never do anything destructive or delete data, ask you for a recent backup before starting and stop the moment you ask. It is all written into the authorisation.
What happens to my data?
Confidentiality. We only access what is necessary, the report is for you alone and everything obtained during the tests is deleted when we finish.
Who fixes the flaws you find?
Whichever you prefer. The report explains how to fix them and your team can do it. If you would rather we do it, we give you a fixed quote with the report, per flaw or as a package (from €59/hour or a fixed price). The second review after the fix is free.

Tell us what you want reviewed

Write to us with the website or systems you want reviewed. We reply with the next steps: first we verify it is yours and sign the authorisation.

Request your penetration test

Your email program opens with a message ready to complete. You can also write directly to info@novantrek.com.