from €99/mo
Starter published list; Growth continuous from €499/mo; portfolio rates in writing
2–3 days
Growth and above: hunt after each company-approved release
24/7
Growth and above: overwatch between releases
What each company gets
The standing hunt, applied per company.
- →Starter is one deep hunt a month. Growth and above retest the external web and API after every release.
- →Agents pentest each company's web app and API on their own. Only hosts authorized in writing.
- →One flat group rate, no meter running in the background.
What the fund gets
A portfolio posture report per cycle: every company, its findings by severity, its top risks, when it was last retested. A named analyst. Co-branded evidence for LPs and diligence rooms, no call in between.
4 companies · 13 findings · top risk HIGH
Sample data. The real report is co-branded, signed, dated.
How it runs
- 01
You name the portfolio. We set one group rate, in writing.
- 02
Companies on Growth and above ship. We retest after every release and sign every cycle report.
- 03
LPs and diligence get the co-branded posture, current and dated.
Why now
A company that ships a web or API product needs current proof to close a deal and pass diligence. A fund buys that same coverage for the companies in the portfolio, at one group rate.
Questions funds ask first
How is the portfolio priced?+
Below published list (Starter from €99/mo, Growth continuous from €499/mo per company), as one flat group rate for the batch. The number comes in writing before you commit, and there is no per-scan meter.
How many companies can the program cover?+
There is no fixed cap. The group rate scales with the number of companies and their external surface, always as a flat increment, always in writing.
What must a portfolio company provide?+
The domains of its external web and API surface, and a signed authorization with written rules of engagement. No internal network, no source code, nothing beyond the written scope.
What happens when a company has a finding?+
A researcher verifies it with a working proof of concept, rates it, and writes the remediation. The company gets its report; the fund sees it in the portfolio posture.
What do you hand over for LPs and diligence?+
The co-branded posture report per cycle: every company, findings by severity, top risks, last retest, signed and dated. You forward it; we do the rest.