Penetration Testing for Growing Companies
We find the vulnerabilities before attackers do – with penetration tests following OWASP, PTES and BSI standards. A German security lead owns every test and signs every report.
- Fixed-price quote after a free scoping call
- German security lead who signs off every report
- Management summary plus technical report with CVSS
- Re-test after your fixes included
Request a quote
Briefly describe what should be tested. We get back to you within one business day.
Why Penetration Testing is Essential
NIS2, ISO 27001, GDPR – IT security requirements are constantly increasing. At the same time, cyberattacks on mid-sized companies are becoming more frequent and sophisticated. A professional penetration test uncovers security vulnerabilities before attackers can exploit them. For companies where IT isn't the core business – such as manufacturing, retail, or services – this is often the only way to realistically assess their own attack surface. With DeViLink, you get penetration tests according to international standards at a fraction of the usual cost.
Our Pentest Services
Comprehensive security testing for your IT infrastructure
Blackbox Testing
Simulation of an external attacker with no prior knowledge – how a real hacker sees your system
Whitebox Testing
Full access to source code and documentation for in-depth analysis
Greybox Testing
Partial information – the efficient combination of realism and depth
Web Application Pentest
OWASP Top 10, API security, session management, authentication
Cloud & Infrastructure
AWS, Azure, GCP – misconfigurations, IAM review, container security
SaaS & PaaS Testing
Multi-tenant security, API endpoints, data isolation, access control
Penetration Testing in Numbers
Professional security expertise for businesses
Our Pentest Process
Structured approach following PTES and BSI standards
Information gathering about your target system – public data, subdomains, technology stack
Systematic identification of vulnerabilities using automated and manual methods
Controlled attack on discovered vulnerabilities – proof of concept for real threats
Impact analysis: lateral movement, privilege escalation, data access
Management summary + technical report with CVSS scores and prioritized recommendations
Time for your team to address the findings – we're available for questions
Verification of fixes – confirmation that all critical vulnerabilities are resolved
Pentest as a Service, Continuous Security
Regular security testing instead of one-time checks
Software evolves, and so do threats. With Pentest as a Service (PaaS), you receive regular security tests within a 1-2 year contract. At least once a year, we conduct a comprehensive penetration test. Depending on your needs, we can also perform smaller, focused tests in between – ideal after major releases or updates. This keeps you continuously compliant and closes new security gaps before they become problems.
Flexible Test Frequency
At least one comprehensive pentest per year, additional smaller tests as needed
Compliance-Ready
Meets requirements for ISO 27001, NIS2, GDPR audits
Predictable Costs
Fixed monthly fee from €400 – no surprises
Re-Testing Included
Verification of your fixes included
Transparent Pentest Pricing
Professional security doesn't have to be expensive
One-Time Pentest
For point-in-time security assessments
- Blackbox, whitebox, or greybox
- Web apps, APIs, or cloud
- OWASP, PTES, BSI standards
- Management summary + tech report
- CVSS-prioritized findings
- Re-testing after fixes included
Pentest as a Service
Continuous security
- Min. one pentest per year
- Additional tests as needed
- 1-2 year contract term
- All test types available
- Compliance documentation
- Re-testing included
Red Teaming Starter
External attack with AI support
- Attack from the outside, no credentials
- One objective, clearly bounded scope
- Expert with AI, not just a scanner
- Report with an action register
- Optional retest €300
- Campaigns and assumed breach on request
Compliance Support
Penetration tests for your audit requirements
ISO 27001
Evidence of regular security testing for your ISMS
NIS2
Meet the new EU requirements for critical infrastructure
GDPR
Demonstrate technical measures for protecting personal data
Industry Standards
PCI-DSS, TISAX, and other industry-specific requirements
Why DeViLink for Your Pentest?
German quality, fair prices
Mid-market pricing
Penetration tests from €3,500 instead of the €7,500–15,000 typical in Germany for comparable scopes — without compromising quality.
German Project Management
Communication in German, understanding of German compliance requirements.
OWASP, PTES, BSI
International standards and German BSI recommendations as foundation.
Start in 2 Weeks
Fast project start, results after 1-2 additional weeks.
Understandable Reports
Executive summary for management, technical details for your IT team.
Re-Testing Included
We verify that your fixes are effective – at no extra cost.
Who Are Our Pentests For?
Security for businesses of all sizes
Mid-Sized Companies (from 10+ employees)
Manufacturing, retail, services – wherever IT enables business but isn't the core focus.
E-Commerce & Online Services
Web shops, customer portals, online services – protect customer data and transactions.
SaaS & Cloud Providers
Multi-tenant security, API protection, data isolation – for your customers' trust.
IT Service Providers
Managed services, hosting, IT services – show your customers verified security.
Penetration testing FAQ
What to know before you commission a test.
After a free scoping call of about 30 minutes you receive a written fixed-price quote. Before testing starts we agree scope, test window, methods and contacts in writing – we only start with that authorisation. Testing can usually start within two weeks.
A penetration test of a small web application starts at €3,500 net. Typical mid-sized projects take three to ten testing days; the price is driven mainly by scope, number of roles, test method and compliance requirements. Our pentest cost calculator gives you a first estimate in a few minutes.
Web applications, APIs, mobile apps, cloud environments (AWS, Azure, Microsoft 365) and external and internal infrastructure – as a black-box, grey-box or white-box test. We decide on the right approach together in the scoping call.
The report documents scope, methodology, findings with CVSS scores and remediation guidance, and works as technical evidence that you test the effectiveness of your security measures. Whether it fully covers your obligations is a question for your auditor or legal adviser – we provide technical evidence, not legal advice.
Most of the testing is carried out by our certified pentesters in Vietnam. Your contact is a German security lead who owns the test, reviews the results and signs every report. Who gets access to which systems is agreed with you before testing starts.
You receive a report with a management summary and a technical section. If you want, our developers help fix the findings – we are a software company ourselves. For the time between two tests, attack surface monitoring is the next step in the Security Cycle.
Duration depends on scope. A typical web application pentest takes 5-10 business days (reconnaissance, testing, reporting). Cloud or complex infrastructure tests may take 10-15 business days. We'll clarify the exact timeline in the scoping call.
The report contains: (1) Executive summary for management, (2) technical detail report with all findings, CVSS scores and reproduction steps, (3) prioritized remediation recommendations. Available in English and German.
Yes. After your remediation period, we conduct a re-test that verifies the effective closure of all critical and high-severity findings — at no additional cost. This gives you certainty that fixes actually work.
Yes. All tests are performed exclusively within the agreed scope. We sign an authorization agreement and NDA upfront. Our team follows strict ethical guidelines and fully documents all actions throughout the engagement.
Ready for Better Security?
Let Us Test Your Security
Schedule a free initial consultation. We'll analyze your needs and create a customized offer.
Yen Ngoc Phan · Manuel Gruschka