What does a scoped bug bounty engagement cost?

A one-week scoped assessment of a single web app or API starts at $500. AI agent red-teaming starts at $4,500. Larger scopes are quoted flat-fee before work begins.

What do I get at the end?

A report with each finding reproduced step by step, severity, impact, and a fix recommendation, plus a free retest after you patch.

Engagements

Hire a bug bounty hunter.

Scoped, human-validated testing of your web app, API, or AI agents — priced flat, published upfront. If your scope doesn't fit a box, email us and you'll have a quote in a day.

See engagements

Engagements

from $4,500

AI agent red-team

Your LLM agent, chatbot, or MCP tooling
Prompt injection, tool abuse, data exfiltration
Excessive-agency and permission audit
MCP/tool inventory + remediation report + retest

from $4,500

App & API assessment

One web app or API, one week
Access control, auth, and logic bugs
Written report, every finding reproduced
Retest after you patch

from $15,000

Agent + app bundle

Your AI agent and the app it lives in
Full agentic + application testing
MCP/tool inventory and threat-model walkthrough
Retest included

from $1,500/mo

Retesting subscription

Every patch retested, every release checked
Critical findings same-day
Monthly summary for your roadmap
Month to month, cancel anytime

How it works

1. You send us the target and the rules of engagement (what's in scope, what's off-limits).
2. We sign your NDA or send ours.
3. We hunt for the agreed window and report as we find — critical issues don't wait for the deadline.
4. You get the written report and a free retest once you've patched.