Skip to content
Vybebat
Pricing · per assessment, no VAT

Clear prices. Agreed scope.

Prices per assessment. No VAT is charged under the German small business rule (§ 19 UStG). Standard has a confirmed full profile; Beta, Indie and Enterprise are defined with you in writing before work begins.

Beta

Free

per assessment · net

For teams willing to give honest feedback while the beta is open.

Assessment scope agreed before work begins.

Ask about Beta

Indie

EUR 249

per assessment · net

For solo developers and smaller apps.

An assessment report for the agreed scope.

Ask about Indie

Standard

EUR 749

per assessment · net

For a full release-build review against the MAS-L1 testing profile.

All 24 controls, plus one retest within 60 days.

Ask about Standard

Enterprise

EUR 2,899

per assessment · net

For a larger assessment scope.

The release and test scope are agreed before work begins.

Ask about Enterprise

Beta is free while it is open in exchange for honest feedback. No assessment starts until its scope and permissions are agreed.

01 · Compare tiers

Compare what is defined.

The comparison shows confirmed scope. It does not assume the same test groups or retest terms across every tier.

Assessment scope by tier
BetaFreeIndieEUR 249StandardEUR 749EnterpriseEUR 2,899
Assessment scope
Agreed in writingAgreed in writingAll 24 MASVS v2.1 controls · MAS-L1Agreed in writing
Static review and device run
Agreed in writingAgreed in writingIncludedAgreed in writing
Report and readout
Agreed in writingAgreed in writingIncludedAgreed in writing
Retest
Agreed in writingAgreed in writingOne within 60 daysAgreed in writing

  • BetaFree

    Assessment scope
    Agreed in writing
    Static review and device run
    Agreed in writing
    Report and readout
    Agreed in writing
    Retest
    Agreed in writing

  • IndieEUR 249

    Assessment scope
    Agreed in writing
    Static review and device run
    Agreed in writing
    Report and readout
    Agreed in writing
    Retest
    Agreed in writing

  • StandardEUR 749

    Assessment scope
    All 24 MASVS v2.1 controls · MAS-L1
    Static review and device run
    Included
    Report and readout
    Included
    Retest
    One within 60 days

  • EnterpriseEUR 2,899

    Assessment scope
    Agreed in writing
    Static review and device run
    Agreed in writing
    Report and readout
    Agreed in writing
    Retest
    Agreed in writing

“Agreed in writing” means the selected groups, methods, report and retest terms are confirmed before work begins.

02 · Test groups

The Standard profile has eight groups.

These are OWASP MASVS v2.1 control areas. Their presence here describes scope, not completed results.

01

Storage

How sensitive information is stored and protected on the device.

2 controls
02

Cryptography

How cryptography is used and keys are managed.

2 controls
03

Authentication

Authentication and authorisation inside the app.

3 controls
04

Network

Transport security and network communication.

2 controls
05

Platform

Interaction with operating-system features and other apps.

3 controls
06

Code quality

Release configuration, dependencies and code-level security.

4 controls
07

Resilience

Resistance to tampering and reverse engineering.

4 controls
08

Privacy

Privacy-related data handling and permissions.

4 controls

Open source or nonprofit

The full Indie report can be free in exchange for permission to publish it as a public sample.

Bootstrap rate

Building it alone? Ask about the same scope and report with a different invoice.

No publication without consent. Findings from a paid assessment are never published, named or anonymised, without written consent.