Before you launch,
find the holes
before attackers do.
The analysis is free. A security expert reviews your service by hand and shows you a summary of what was found first. Pay for the full report or the fix only after you have seen the results — and only if you need them.
- Free analysis
- Pay after you see results
- Max ₩400,000 per request
A simulated analysis on a fictional site
0
Baseline checks
0steps
From request to fix
0s
Download link lifetime
0days
Until reports auto-delete
Who it's for
When a security review matters most
Startups about to launch
If security review kept slipping behind feature work, get one pass before you go live and launch with confidence.
Services handling personal data
Leaked accounts, payment details or order history bring fines and lost trust together. Close the exposure paths first.
Teams asked for an assessment
When a client or marketplace requires a security assessment, get a report in a format you can hand over.
Process
From request to fix, all in one place
Track every step from your dashboard.
- 01
Submit a request
Tell us the target, scope and preferred timeline.
- 02
Verify ownership
Prove it is your service with a DNS record or an uploaded file.
- 03
Free analysis
An expert analyzes vulnerabilities by hand. No charge.
- 04
Review the summary
See findings by severity on your dashboard for free.
- 05
Unlock the report
Need the details? Pay and download the full report right away.
- 06
Request a fix
Hard to fix in-house? Hand the remediation over to us.
Coverage
We look where automated scanners don't
Starting from the OWASP Top 10, we follow your service's real feature flows by hand.
Authentication & sessions
- Login bypass
- Session hijacking/fixation
- Password reset flaws
Access control
- Viewing others' data (IDOR)
- Admin function access
- Privilege escalation
Input handling
- SQL injection
- XSS
- File upload abuse
Information exposure
- Over-sharing API responses
- Verbose error messages
- Hard-coded keys/tokens
Configuration
- Security headers
- CORS settings
- Unneeded public paths
Business logic
- Payment amount tampering
- Coupon/points abuse
- Request replay
Security Report · v1
example-shop.com web service
- Crit
Order API exposes other users' orders
GET /api/orders/{id}
- High
Payment approved with client-supplied amount
POST /checkout/confirm
- High
Admin export endpoint lacks authentication
GET /admin/export
- Med
No limit on login attempts
POST /auth/login
Sample screen built on a fictional site
Deliverable
What's wrong, how risky it is, and how to fix it
See the summary on the site and download the details as a PDF.
- Severity rating
- Five levels from Critical to Info, so you know what to fix first.
- Reproduction steps
- Step-by-step requests and responses your developers can replay.
- Remediation guide
- Concrete guidance on which code or settings to change, and how.
Pricing
Free analysis, pay only for what you need
Get a free analysis and review the summary first. Choose the detailed report or the fix only when you need them. Prices are in Korean won (KRW).
Vulnerability analysis
Web · API · Mobile · Source code
Free
- Manual expert analysis
- Findings summary by severity
- Progress tracking on your dashboard
Report unlock
Full analysis report
₩200,000
- Reproduction steps per finding
- Impact and severity rationale
- Code/config remediation guide
- PDF download
Fix request
Remediation based on the report
₩200,000
- We fix the findings for you
- Scope agreed up front
- Access hand-back recorded
Never more than ₩400,000 per request. No hidden fees. Customers outside Korea can pay in USDT (TRC20).
Confidentiality
A vulnerability report is sensitive by itself
A leaked report is an attacker's playbook. So storage and access are enforced by the system, not by people being careful.
Owner-only access
Only the requesting account can view the report, and every download is logged.
Auto-deletion
Report files are deleted automatically 90 days after release.
Access hand-back log
Server access used for a fix is confirmed as returned and recorded when the work ends.
NDA on request
If you need one, we sign a non-disclosure agreement before testing.
FAQ
Before you submit
Will testing take my service down?
We don't run automated high-volume attacks that load your service. Anything risky is agreed in advance, and we can test against a staging server instead of production.
Can I request a test of someone else's site?
No. You can only submit services you own or have explicit permission from the owner to test, and ownership is verified before we start.
Is the analysis really free?
Yes. The analysis and the summary (findings by severity) are free. You pay ₩200,000 only if you want the full report, and ₩200,000 more if you want us to fix it — at most ₩400,000 per request.
How long does it take?
It depends on the scope. After reviewing your request we post an estimated schedule to your dashboard.
Can you re-check after we fix things?
Yes. Either hand the fix to us, or fix it yourself and submit a separate re-test request.
What does the report look like?
It's a PDF. Each finding includes severity, reproduction steps, impact and remediation, and you can view the summary on the site right away.
Have a service that needs a security review?
The analysis is free. Check the summary and pay only if you need the report.