Attackers now work with AI, so we fight AI with AI. Our experts use it to pentest your systems, within the limits you sign off on.
Attackers use AI to find weak spots and move faster, and that work no longer takes a large team. It also means smaller organizations are worth a try.
Source: CrowdStrike 2026 Global Threat Report, figures for 2025.
Rules are getting stricter too. Since 15 August 2026 the Dutch Cyberbeveiligingswet applies, with new obligations for more than 8,000 organizations, according to the NCSC.
AI alone misses what requires judgment. People alone cannot keep up with attackers who use AI. Together they cover both.
Logins, permissions, payment flows and data access: the places where a flaw in the logic costs the most.
What can be reached from the outside, what is misconfigured, and how far someone gets once inside.
Chatbots and agents can be manipulated. We test for prompt injection, data leaks and agents doing more than they should.
Our cybersecurity experts handle that responsibly. These are the rules every test runs under.
A conversation about what matters most to you. You get a fixed price and we sign off on the rules together.
AI covers the breadth while our experts go after what could really hurt you, and we keep you informed.
Every risk in order of urgency, with proof, the impact in plain language and concrete steps to fix it.
We walk your team through the findings. Once you have fixed them, we test again to confirm they are closed.
Automated tool
€119 incl. VAT
A quick check of your website from the outside. Our automated tool looks at what anyone on the internet can see. It is not a pentest, but a fast first look.
Experts with AI
Fixed price, after a scoping call
One clearly defined test of what matters most to you. For a new release, a customer who asks for proof or simply to know where you stand.
Subscription
Fixed monthly price
One test a year is out of date after the next release. With a subscription, testing continues as your systems change.
| Feature | Spoedcheck | Pentest |
|---|---|---|
| Finds known issues | Yes | Yes |
| Finds flaws in your business logic | No | Yes |
| Combines issues into an attack path | No | Yes |
| Checked and explained by a person | No | Yes |
| Tests behind the login | No | Yes |
| Result within 24 hours | Yes | No |
We test carefully and agree up front what may and may not happen. Risky tests take place at an agreed moment or on a test environment, and we stop if anything looks off.
A scan reports what it recognizes. A pentester tries to actually get in, combines small problems and shows what that means for your business. Our PHP Spoedcheck is an automated check; a pentest is work by experts.
No. AI is fast and thorough on breadth, but deciding what matters, finding flaws in business logic and taking responsibility remain work for people. That is why we use both.
The law asks organizations it applies to to manage their risks. It does not automatically mean you need a pentest, but a pentest does show whether your measures work. Whether the law applies to you is something to check with the NCSC.
That depends on the scope. After a short conversation you get a fixed price, so you know where you stand before we start.
We agree up front which tools we use and how your data is handled. If you have specific requirements, tell us and we take them into account.