Web applications, SaaS platforms, and customer-facing products.
For startups preparing for a first audit or vendor review.
For growing teams handling sensitive data and recurring customer reviews.
For regulated teams and complex applications that need deeper coverage.
Suitable for applications with AI/LLM features.
Multiple applications, a larger environment, or a fixed deadline.
Compare scope limits and the delivery foundation in every package.
| Scope & deliverables | Lite | Essentials | Assurance |
|---|---|---|---|
| Price | $4,999 | $7,499 | $8,999 |
| Choose a package | Choose Lite | Choose Essentials | Choose Assurance |
| Assessment surface | Web app / API | Web app / API | Web app / API |
| Maximum user roles | 2 | 3 | 5 |
| OWASP Top 10 coverage | Included | Included | Included |
| Report with evidence and remediation | Included | Included | Included |
| 30-day findings Q&A · email/Slack | Included | Included | Included |
| Attestation letter | Included | Included | Included |
| Executive summary | Not listed | Included | Included |
| Fix validation within 90 days | Add-on | One round | One round |
| Jira / CSV issue export | Not listed | Included | Included |
| Business logic coverage | Limited depth | Business logic abuse | Advanced attacks and business logic abuse |
| Fast-track start | Add-on · subject to availability | Add-on · subject to availability | Eligible · subject to availability; add-on 50% off |
| Live debrief call | Add-on | Add-on | Optional · arrange with Blaze |
| AI/LLM applications | Choose Assurance | Choose Assurance | Suitable for applications with AI/LLM features. |
| Choose a package | Choose Lite | Choose Essentials | Choose Assurance |
Your project manager coordinates setup, scope confirmation, access requirements and delivery dates before testing starts. You will receive findings and reports through VulnKeep.
Testing typically starts in 2–3 weeks, subject to availability and scope readiness. Fast-track scheduling targets approximately one week. Your project manager confirms the dates before testing begins.
Talk to an expert before purchase for larger or unusual scopes. Blaze will help determine the appropriate package or a custom assessment.
Lite offers fix validation as an add-on. Essentials and Assurance include one round within 90 days. Additional rounds are available separately.
Each package covers one surface. Lite supports up to 2 roles or 15 external IPs; Essentials up to 3 roles or 50 IPs; Assurance up to 5 roles or 100 IPs. Scope is agreed before testing.
Support audit, customer and procurement requirements with independent testing and clear reporting.
