Expert-led pentesting and continuous exposure testing for your apps, APIs and infrastructure.
Choose the systems you want to understand. We agree the scope and rules of engagement before testing begins.
Access boundaries between users and tenants, session handling, input validation and workflows that can be abused.
Application and API count, authentication methods, available test roles and the business-critical journeys you want reviewed.
Internal or external exposure, service configuration, identity boundaries and potential lateral movement within authorised targets.
Approximate target count, internal versus external testing, access requirements and agreed testing windows.
Cloud access controls, resource exposure, privileged identities and configuration in the platforms included in your scope.
Cloud providers, account or subscription count, key services and whether read-only review or active testing is needed.
Agreed phishing or social-engineering scenarios, escalation paths and the controls intended to protect your organisation.
The approved audience, scenario boundaries, stakeholder approvals and the reporting requirements for the exercise.
Your environment changes. New exposures appear. A single point-in-time test cannot tell the whole story.
MTE keeps automated discovery and testing running across your agreed attack surface, with human expertise to validate findings and guide remediation. Round-the-clock exposure coverage, without building a dedicated exposure-testing function in-house.
24/7 refers to automated discovery and testing within the agreed scope. Human review, response times and testing cadence are agreed in your proposal. MTE is exposure testing, not a replacement for every security role.
A pentest should leave you with more than a list of vulnerabilities. We connect evidence to business impact, prioritise the work and help your team take the next step.
Discuss your scopeAgree the targets, access, rules of engagement and testing windows. No ambiguity about what is included.
Combine automated discovery with expert-led testing to investigate attack paths and validate the findings that matter.
Get a report with proof, severity, business impact and practical remediation guidance, followed by a walkthrough and an included retest.
We combine AI discovery with hands on penetration testing. Our experts investigate potential attack paths, verify findings and give your team a clear plan to address them. Choose a focused assessment or continuous testing with Managed Threat Exposure.
Discover assets and look for weaknesses within your agreed scope.
Investigate findings, validate impact and separate signal from noise.
Turn technical evidence into prioritised next steps for your team.
Choose how subscriptions are billed. One-off testing stays one-off.
A focused test of your apps, APIs or infrastructure. A clear view of the risk, and what to fix.
One-time engagement. No subscription.
For businesses that want to keep testing, not wait for the next annual assessment.
Billed monthly. Scope and cadence agreed upfront.
Prices are starting points, not unlimited testing. Final pricing, included assets, testing cadence, retest terms, response times, taxes and contract terms are confirmed in your proposal. Reports can support compliance work; a pentest or MTE subscription does not itself establish regulatory compliance.
Cloud configuration and access review, with ongoing misconfiguration monitoring.
Enterprise coverage and security advisory, shaped around your environment.
The right engagement starts with clear expectations.
Choose a one-off pentest for a defined assessment, release or assurance milestone. Choose MTE for ongoing exposure testing as your environment changes. We help agree the right scope and cadence before you commit.
No. Automated discovery and testing run continuously across the agreed scope. Human validation, expert-led testing, reporting cadence and response times are defined in your proposal. It is not an unlimited manual testing service or a replacement for every security function.
We confirm availability after agreeing the scope, access and rules of engagement. Tell us about your timeline when you request a quote.
We can sign an NDA before you share sensitive information. Data handling, access and disclosure are governed by the engagement agreement and applicable law. You receive the findings from the agreed testing scope. Testing is authorised in writing, with agreed windows and escalation contacts; no security test is entirely risk-free.
Your report includes verified findings, severity, evidence, business impact and practical remediation guidance. A walkthrough and retest after your fixes are included, with timing and boundaries agreed in the proposal.
A one-off pentest starts at €3,470 per engagement. MTE starts at €5,930 per month on monthly billing. Cloud Risk Audit starts at €1,460 per month. Annual subscription billing offers a 10% discount. Final scope and commercial terms are agreed before testing begins.
Tell us what you want tested. We will come back with a proposed scope, a quote and availability.
hello@dalesec.com ↗Confidential from the first conversation. We can sign an NDA before you share sensitive information. Customer data and findings are handled confidentially, with disclosure governed by your agreement and applicable law. You receive a full account of findings within the agreed testing scope.
