Independent testing of your agreed external infrastructure surface.
For startups preparing for a first audit or vendor review.
For growing teams handling sensitive data and recurring customer reviews.
For regulated teams and larger external networks that need deeper coverage.
Multiple applications, a larger environment, or a fixed deadline.
Compare scope limits and the delivery foundation in every package.
| Scope & deliverables | Lite | Essentials | Assurance |
|---|---|---|---|
| Price | $4,999 | $7,499 | $8,999 |
| Choose a package | Choose Lite | Choose Essentials | Choose Assurance |
| Assessment surface | External network | External network | External network |
| External IPs | 15 | 50 | 100 |
| OWASP coverage where applicable | Included | Included | Included |
| Report with evidence and remediation | Included | Included | Included |
| 30-day findings Q&A · email/Slack | Included | Included | Included |
| Attestation letter | Included | Included | Included |
| Executive summary | Not listed | Included | Included |
| Fix validation within 90 days | Add-on | One round | One round |
| Jira / CSV issue export | Not listed | Included | Included |
| Business logic testing where applicable | Limited depth | Business logic testing where applicable | Advanced attacks; business logic testing where applicable |
| Fast-track start | Add-on · subject to availability | Add-on · subject to availability | Eligible · subject to availability; add-on 50% off |
| Live debrief call | Add-on | Add-on | Optional · arrange with Blaze |
| Choose a package | Choose Lite | Choose Essentials | Choose Assurance |
Your project manager coordinates setup, scope confirmation, access requirements and delivery dates before testing starts. You will receive findings and reports through VulnKeep.
Testing typically starts in 2–3 weeks, subject to availability and scope readiness. Fast-track scheduling targets approximately one week. Your project manager confirms the dates before testing begins.
Talk to an expert before purchase for larger or unusual scopes. Blaze will help determine the appropriate package or a custom assessment.
Lite offers fix validation as an add-on. Essentials and Assurance include one round within 90 days. Additional rounds are available separately.
The scope covers one external infrastructure surface, with up to 15, 50 or 100 external IPs depending on your package. Blaze confirms the target list and authorization before testing.
Support audit, customer and procurement requirements with independent testing and clear reporting.
