Kituwa IT · Security testing
Focused, authorized security assessments for small-business websites, exposed systems, and local networks. You get a clear explanation of what we checked, what we found, and what to fix first.
Discuss a security assessmentWe combine careful discovery, appropriate scanning, and human review of the results. Every engagement has a written scope and testing window. We report confirmed findings separately from items that need further investigation.
These focused reviews help you address common, visible weaknesses. A comprehensive penetration test involving deeper exploitation, application logic, credential attacks, or compliance requirements is quoted separately with a qualified specialist when needed.
Defined scopes · Starting prices
Prices below cover a straightforward environment. We confirm ownership, access, size, and a safe testing window before finalizing a quote.
See what an outsider can discover about your business systems.
No login attempts, exploitation, or testing of third-party infrastructure.
Check one business website for common security and configuration problems.
Checkout, account flows, APIs, and active attack testing require a separate scope and suitable test environment.
Understand what is connected and which services may need attention.
Travel, additional networks, fragile equipment, and authenticated device scans are quoted separately.
Combine the external, website, and internal reviews in one prioritized report.
Remediation work is separate and approved before it begins.
We identify the systems you own or may authorize, permitted techniques, schedule, contact person, and stop conditions.
We run the agreed checks at a controlled pace and review tool output before treating it as a finding.
We explain the evidence, business impact, recommended fixes, and what the limited scope could not establish.
The listed packages are focused security and vulnerability reviews. They do not promise exhaustive coverage or a compliance certification. If you need an attestation, complex web-app testing, or deeper manual exploitation, we can scope a specialist-led engagement separately.
Yes. The system owner or authorized representative must approve the exact targets, methods, and testing window in writing. Cloud providers, payment systems, vendors, and shared hosting may have separate rules.
We choose conservative settings and a suitable window, but even routine discovery can affect fragile systems. We identify sensitive equipment in advance and stop if a problem appears.
Often. We can quote configuration changes, updates, firewall adjustments, and follow-up checks after you review the findings. Fixes are a separate service.
Send the domain or a high-level description of your network, who owns it, and what concerns you. Please do not send passwords or sensitive records through the contact form.
Request a scope and quote