Skip to content
Talk to Us

Pricing

Contact us for platform pricing, or start with a mobile app pentest.

Security assessment

Mobile App Pentesting

$5,000*

*Limited-time promotion. Standard engagement price is $15,000.

Engagement includes

  • Scoping call to identify the pathways for fraud
  • Static and dynamic analysis of high-risk features
  • Report with reproducible findings and remediation guidance
  • Technical debrief and retesting
Discuss your pentest
Full platform

Community Banks & SMBs

Contact us for pricing

First monthFree

Full platform

  • Attestation SDKs for iOS and Android
  • RASP Instrumentation Engine
  • AI-Native Developer & Analyst Platform
    • Cipherstep Agent
    • Reporting & Evidence Automation
    • Alerting & Integration Tooling
Talk to our team
Custom deployment

Enterprise

Contact us for pricing

Pricing is based on

  • Products and data licensed
  • Deployment requirements (on-prem, API)
  • Usage volume
  • Internal or commercial use
  • Integration requirements
Discuss your requirements

FAQs

Talk to our team
We aren’t a financial business. Can we still use the platform?

Yes. While we primarily work with banking, fintech, and cryptocurrency platforms, our technology also applies to industries such as social media, marketplaces, and gaming. Tell us about your use case, and we’ll explore where the platform could fit.

Do we need to involve our development, authentication, or KYC vendor in a pentest?

Not always. We can often scope testing to offline binary and runtime analysis without touching live endpoints. During scoping, we’ll establish the testing boundaries and identify any vendor permissions or contractual restrictions that need to be addressed. The goal is to find weaknesses before threat actors do.

Our fraud provider already includes a mobile attestation SDK. Why add Cipherstep?

An attestation SDK’s presence alone doesn’t tell you how resilient it is to tampering or reverse engineering. Mobile security is a specialist discipline that requires deep knowledge of Android and iOS internals and continuous research into bypass techniques. A pentest can show how your current SDK holds up and where an additional layer could add value.

How does Cipherstep keep pace with sophisticated threat actors?

We set incident response commitments through an SLA and system performance targets through an SLO. No security provider can guarantee that its systems will never be bypassed or reverse-engineered. Our research team is committed to staying at the forefront of mobile security research, continuously testing and strengthening our defenses as threats evolve.

Does the platform support SSO?

Yes. Our portals include dedicated identity and access management, with SSO, restricted team roles, and configurable MFA requirements. We support passkeys, authenticator apps, and security keys.