Security Services - NEW

Penetration Testing & AI Security Services - Audit-Grade Evidence from €539

Independent penetration testing and AI security services for B2B SaaS, fintech, and regulated platforms. Audit-grade evidence for ISO 27001, SOC 2, and cyber insurance.

🎯 Vulnerability Assessment - €539 Browse All Services ↓

Quick Answer

Optimum delivers 28 independent security services across three categories: penetration testing (5 clearly-defined tiers from €539 vulnerability assessment to €12,000 enterprise SaaS pentest, including an Infrastructure & Cloud assessment, plus an AI Red Team add-on), AI Shield (18 services covering LLM applications, prompt injection, AI red teaming, MCP security, and AI governance), and PHP2Shell response (5 services: emergency patching, compromise check and continuous exposure monitoring). All engagements produce CVSS v4.0 scored findings with signed Attestation Letters accepted as evidence for ISO 27001, SOC 2, and cyber insurance underwriter requirements. Penetration testing services for UK, EU, and US companies. Fixed-price penetration testing from Chișinău (Moldova IT Park), with published prices from €539. Penetration testing for SOC 2 (CC4.1, CC7.1), ISO 27001 (Annex A.8.29), PCI DSS (Requirement 11.4), DORA (Article 24), and cyber insurance underwriters.

PHP2Shell Emergency Patch

URGENT

Critical PHP flaw (CVE-2026-109618 / CVE-2026-109619) with exploit attempts in the wild. We patch every PHP runtime serving your traffic, verify the running version and deliver a dated per-host report.

Single Server - €229
Small Fleet - €590
Fleet / Containers - from €1,490

View Services

Penetration Testing

5 TIERS

Five clearly-defined tiers from €539 Vulnerability Assessment to €12,000 Enterprise SaaS Pentest, plus an AI Red Team add-on. OWASP WSTG v4.2, CVSS v4.0, audit-grade Attestation Letters.

Compare a pentest quote Pentest for SOC 2 / ISO 27001 / PCI DSS Mobile app pentest requirements

View Services

AI Shield - AI Security

18 SERVICES

LLM applications, prompt injection, AI-specific attack vectors. OWASP LLM Top 10:2025. AI Red Team, Prompt Firewall, MCP Security Gateway, AI Governance.

AI Code & Pipeline AI Agent & LLM Enterprise & Governance

View Services

PHP2Shell Follow-up & Monitoring

2 SERVICES

Patched is not the same as clean. A read-only compromise check for web shells and exploitation traces, then monthly monitoring of your exposed hosts and PHP versions.

View Services

Filter by:

Popular starting points:

🤖 AI Code Audit - €149 🛡 AI Red Team Pentest - €990

All 28 Security Services - Full Price List

Every security service at a glance. Filter by category, sort by price or delivery time.

Showing 28 of 28 services

Full price list - security testing and AI Shield services by Optimum Web
ID	Service	Category	Price	Delivery
OW-AIS-01	AI Code Security Audit	AI SHIELD	€149One-time	5 business days	Order
SEC-CEM	Continuous Exposure Monitoring	PHP2SHELL	from €149 / monthMonthly	Subscription, billed monthly	Order
SEC-PATCH-01	PHP2Shell Emergency Patch - Single Server	PHP2SHELL	€229One-time	Starts within 24 business hours	Order
OW-AIS-15	Backup Bunker	AI SHIELD	€290One-time	5 business days	Order
SEC-P2S-CC	PHP2Shell Compromise Check	PHP2SHELL	from €290One-time	2-4 business days	Order
OW-AIS-03	AI Supply Chain Guard	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-04	Configuration Sentinel	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-05	Secrets Vault Setup	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-06	Bot & API Shield	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-11	Dev Sandbox Cloud	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-18	AI Security Academy	AI SHIELD	€390One-time	5-7 business days	Order
OW-AIS-02	Secure CI/CD Pipeline	AI SHIELD	€490One-time	5-7 business days	Order
OW-AIS-08	AI Agent Sandbox	AI SHIELD	€490One-time	5-7 business days	Order
OW-AIS-09	Prompt Firewall (AI DLP)	AI SHIELD	€490One-time	5-7 business days	Order
SEC-PENT-01	Web Application Vulnerability Assessment	PENTEST	€539One-time	9-10 business days	Order
OW-AIS-13	Identity Fortress (IAM)	AI SHIELD	€590One-time	7-10 business days	Order
OW-AIS-14	Cloud Armor	AI SHIELD	€590One-time	7-10 business days	Order
OW-AIS-17	AI Audit Trail	AI SHIELD	€590One-time	7-10 business days	Order
SEC-PATCH-02	PHP2Shell Emergency Patch - Small Fleet (up to 5)	PHP2SHELL	€590One-time	Starts within 24 business hours	Order
OW-AIS-07	MCP Security Gateway	AI SHIELD	€690One-time	7-10 business days	Order
OW-AIS-12	Threat Radar Monitoring	AI SHIELD	€690/monthMonthly	5 business days setup	Order
OW-AIS-16	AI Governance Hub	AI SHIELD	€790One-time	10 business days	Order
SEC-PENT-05	External Infrastructure & Cloud Security Assessment	PENTEST	€899One-time	8 business days	Order
OW-AIS-10	AI Red Team Pentest	AI SHIELD	€990One-time	10-14 business days	Order
SEC-PATCH-03	PHP2Shell Emergency Patch - Fleet / Containers	PHP2SHELL	from €1,490One-time	Quote → scheduled within 1 business day	Order
SEC-PENT-02	Focused Web Application Penetration Test	PENTEST	from €1,800One-time	1.5-2 weeks	Order
SEC-PENT-03	Standard Web Application & API Penetration Test	PENTEST	from €4,500One-time	3 weeks	Order
SEC-PENT-04	Enterprise SaaS Penetration Test	PENTEST	from €8,000One-time	4-5 weeks	Order

Coming Soon

COMING SOON

Incident Response

Rapid response, forensic analysis, evidence preservation, regulatory notification.

Notify me when available →

Our Standards & Methodology

OWASP WSTG v4.2 aligned methodology

OWASP LLM Top 10:2025 for AI systems

CVSS v4.0 severity scoring

CWE classification on all findings

Signed Attestation Letters for audit

ISO 27001 certification in progress (target Q1 2027)

GDPR processor - DPAs and SCCs available

Mutual NDA before technical disclosure

Senior-only testers - no juniors

Frequently Asked Questions

What's the difference between Penetration Testing and AI Shield?+

Penetration Testing covers traditional web applications, APIs, and infrastructure (OWASP WSTG v4.2). AI Shield is specialised testing for LLM applications, AI agents, and AI-specific attack vectors (OWASP LLM Top 10:2025) - prompt injection, model extraction, agentic AI security, MCP servers.

Will your pentest reports be accepted as ISO 27001 evidence?+

It depends on the tier. The €539 Vulnerability Assessment is evidence for Annex A.8.8 (management of technical vulnerabilities). Annex A.8.29 (security testing in development and acceptance) requires a penetration test - our Focused tier (from €1,800) and above. Every tier includes a signed Attestation Letter stating explicitly which type of engagement was performed. We recommend confirming the specific control with your auditor before engagement.

Do you offer self-service ordering?+

Lower-tier services (Vulnerability Assessment €539, most AI Shield services under €1,000) can be ordered directly. Larger engagements (Standard Pentest, Enterprise SaaS Pentest) require a scoping call first - click 'Order' and we'll send an invoice after confirming scope.

Are you CREST accredited?+

We're not a CREST-member firm - CREST has no local accreditation path in Moldova. We build credibility through OWASP-aligned methodology, named-tester accountability, ISO 27001-aligned controls (certification target Q1 2027), and audit-grade reporting.

What does a typical engagement timeline look like?+

Vulnerability Assessment: 9-10 business days. External Infrastructure & Cloud Assessment: 8 business days. Focused Pentest: 1.5-2 weeks. Standard Pentest: 3 weeks (includes remediation retest). Enterprise SaaS Pentest: 4-5 weeks. AI Shield services: varies by scope, typically 1-3 weeks.

Do you sign NDAs and DPAs?+

Yes. Mutual NDA signed before any technical disclosure. UK GDPR-compliant DPA available. EU Standard Contractual Clauses ready. GDPR processor relationship established for all client engagements.

What if I need both pentest AND AI security testing?+

We can bundle. Tier 3 Standard Pentest (€4,500+) with the optional OWASP LLM Top 10 module (+€2,000-3,000) is the most common combination for AI-powered SaaS platforms.

How much does penetration testing cost?+

Our penetration testing services range from €539 (Vulnerability Assessment, 9-10 business days) to €12,000 (Enterprise SaaS Pentest, 4-5 weeks). Focused Web App Pentest starts at €1,800 (1.5-2 weeks), Standard SaaS + API Pentest from €4,500. Prices are published and fixed. Compare published prices from other European providers in our Pentest prices across Europe 2026 guide.

Why are Optimum's penetration test prices lower than many European providers?+

Our engineers are based in Chișinău, Moldova (Moldova IT Park), where operating costs are lower than in London or Munich. We test to the OWASP WSTG v4.2 methodology, score findings with CVSS v4.0, and issue a signed Attestation Letter. We are not CREST-accredited; if your procurement requires CREST membership, tell us on the first call. Our fixed prices run from €539 to €12,000.

What's the difference between vulnerability assessment and penetration test?+

Vulnerability Assessment (€539) combines automated scanning with manual validation of high-severity findings. It identifies vulnerabilities without fully exploiting them. Penetration Testing (from €1,800) involves real manual exploitation - confirming vulnerabilities are genuine, testing business logic, and showing the actual impact. VA satisfies "regular security testing" requirements; Pentest is required where the regulation or customer specifically says "penetration test".

Do you work with UK, EU, and US clients?+

Yes. We work with clients across the United Kingdom, European Union (Germany, Netherlands, France, Austria, Switzerland), and the United States. All engagements are delivered remotely under UK GDPR-compliant DPAs and EU Standard Contractual Clauses.

What OWASP methodology do you use?+

Web application testing follows OWASP Web Security Testing Guide (WSTG) v4.2. API testing follows OWASP API Security Top 10 (2023). AI security testing follows OWASP LLM Top 10:2025. Findings are rated with CVSS v4.0 vectors and CWE classification.

Need help choosing?

Book a 30-min consultation. We'll scope the right engagement for your compliance requirement and budget.