No surprise bills.
What you pay depends entirely on what your business actually needs, never on hidden fees or unexpected charges. I make sure you always know exactly what you are paying for, what isn't included, and what happens next.
HOW MY PRICING WORKS
- Clear, fixed costs: I give you a clear price upfront, so you know exactly what to budget for.
- No trap doors: I will never force you into a long-term contract you don't need.
- Sticking to the plan: I only do the work we agreed upon, so I will never send you an unexpected bill.
Secure Web Development
Security doesn't have to mean technical debt. I build your platforms securely from the start, keeping the code clean so you can scale effortlessly later.
Starter
Ideal for testing our synergy. I engineer a secure core module or MVP backend, providing a solid, vulnerability-free foundation for your team to build upon without early technical debt.
Middle
The complete secure development lifecycle. I build your full web application with built-in protection, delivering a clean codebase and a precise maintenance guide for your internal developers.
Premium
Built for strict regulatory compliance. Includes full-scale architecture engineering, hardened server deployment, and comprehensive secure coding mentorship to elevate your team's security mindset.
Action-Driven Penetration Testing
I do not just hand you a 200-page PDF of vulnerabilities. I expose the gaps, explain exactly why they exist, and provide your team with the precise code to fix them permanently.
Starter
A highly targeted manual assessment of a specific application or critical module. You receive a verified vulnerability list and a direct remediation roadmap, perfect for securing an MVP before launch.
Middle
A comprehensive deep-dive into your full web architecture, APIs, and business logic. Includes detailed secure coding guidelines and a dedicated technical mentorship session for your developers.
Premium
Built for enterprise compliance. Includes full-scope architectural exploitation, automated DevSecOps pipeline integration advice, and board-ready documentation for nFADP and ISO 27001 audits.
Cybersecurity Trainings
Penetration tests expose vulnerabilities, but only education prevents them. I train your developers to write secure code by default, eliminating repetitive technical debt and drastically reducing your future testing costs.
Starter
A highly targeted, two-day mentorship session for small development teams. Focuses exclusively on applying OWASP Top 10 principles and secure coding habits directly to your current technology stack.
Middle
A comprehensive five-day DevSecOps integration workshop. Includes isolated vulnerability labs on Ubuntu Linux environments and a concrete roadmap to automate security checks within your CI/CD pipelines.
Premium
Built for enterprise compliance and complete cultural transformation. Includes customized modules for all staff, interactive story campaigns featuring everyday operator personas to teach data integrity organically, and board-ready documentation for ISO 27001 readiness.
Continuous Security Engineering
Finding vulnerabilities right before a launch causes stressful delays and expensive patches. I integrate automated security checks directly into your CI/CD pipelines, ensuring your code is secure by design from the very first commit.
Starter
Pipeline Security Assessment (~3 Days): A comprehensive architectural review of your existing deployment workflows. Delivers a concrete blueprint for integrating secure practices and identifying immediate bottlenecks in your SDLC.
Middle
Automated SDLC Integration (~7 Days): Full establishment of CI/CD security pipelines using tools like Git and Ansible. Includes embedding automated vulnerability scanning directly into your workflows to actively minimize deployment errors.
Premium
DevSecOps & Compliance Transformation (~12 Days): Enterprise-grade integration. Covers advanced microservices hardening, IAM integration, and structural alignment with ISO 27001 to target zero non-conformities during formal reviews.
Source Code Analysis
Automated scanners miss complex business logic flaws and overwhelm teams with false positives. I provide deep, structural source code analysis to uncover and mitigate architectural vulnerabilities before they reach production.
Starter
Targeted Code Review (~3 Days): A focused architectural analysis of a critical module or microservice. Uncovers hidden business logic flaws and provides concrete mitigation steps for immediate implementation.
Middle
Comprehensive Source Code Analysis (~7 Days): Deep manual security review across your primary backend repositories (Python Django, Node.js, TypeScript). Includes false-positive elimination and tailored secure coding mentorship for your team.
Premium
Full Architecture & DevSecOps Code Audit (~12 Days): Enterprise-grade security review. Covers complex microservices logic, advanced authentication bypass detection, cryptographic implementation reviews, and complete SDLC integration alignment.
Cybersecurity Audits & Compliance
Internal teams cannot objectively audit their own architecture. As an independent expert, I provide the rigorous external cybersecurity audits required by management boards and regulatory frameworks, targeting zero non-conformities.
Starter
Baseline Security Audit (~3 Days): A focused vulnerability assessment and gap analysis of a specific network zone or microservice. Delivers immediate visibility into critical compliance shortcomings.
Middle
Comprehensive Compliance Audit (~7 Days): In-depth infrastructure review and process alignment for ISO 27001, GDPR, and the Swiss nFADP. Includes detailed remediation strategies for your engineering team.
Premium
Enterprise Regulatory Validation (~12 Days): Military-grade infrastructure assessment and full DevSecOps audit. Targets zero non-conformities for formal reviews and includes comprehensive threat modeling across complex multi-cloud environments.
Targeted Assessment
What’s included:
- A deep dive into how your systems currently work.
- Identifying the real risks you actually need to worry about.
- A plain-English summary so you can make confident decisions.
Typical timeline: 1 to 2 weeks
Specific Project Support
How it works:
- We work together to solve a specific problem or reach a clear goal.
- I explain exactly what I will do for you before we start.
- You will know exactly what you are getting at the end, with no surprises.
Ongoing Support
How it works:
- A flexible monthly plan based on what your business needs right now.
- I am available when you need me most, fitting into your schedule.
- You are in complete control—you can pause, cancel, or ask for more help at any time.
I will give you an exact price and a clear plan of action after our first chat.
WHAT AFFECTS PRICING
- Product complexity
- Regulatory environment (CH / EU)
- Stage of development
- Internal team involvement
Not sure where to start?
If I am not the right person to help, I will tell you upfront.