# VAPT.COM.AU

> Independent penetration testing and security audits for Australian businesses. Manual, attacker-style testing of web applications, APIs, mobile apps, cloud environments and networks. Fixed quotes in AUD, onshore testers, plain-English reporting, free retesting.

Key facts:
- Services: web application, API, mobile, cloud and network penetration testing
- Manual-first, mapped to OWASP (Top 10, ASVS, MASVS, API Top 10), PTES and NIST SP 800-115
- Findings scored with CVSS 3.1; reports include reproduction steps and an executive summary
- Retesting included; attestation letter after verified fixes
- Typical pricing: small web app tests from around $6,000 AUD; most single-application engagements $10,000 to $25,000 AUD
- Australian practice; contact pentest@vapt.com.au
- We do not claim CREST, IRAP or ISO 27001 certification of the practice on this site

## Services
- [Services overview](https://vapt.com.au/services/)
- [Web application penetration testing](https://vapt.com.au/services/web/)
- [API penetration testing](https://vapt.com.au/services/api/)
- [Mobile app penetration testing](https://vapt.com.au/services/mobile/)
- [Cloud security review](https://vapt.com.au/services/cloud/)
- [Network penetration testing](https://vapt.com.au/services/network/)

## Industries and locations
- [Industries](https://vapt.com.au/industries/)
- [Financial services / APRA CPS 234](https://vapt.com.au/industries/financial-services/)
- [SaaS](https://vapt.com.au/industries/saas/)
- [Healthcare](https://vapt.com.au/industries/healthcare/)
- [Locations](https://vapt.com.au/locations/)
- [Sydney](https://vapt.com.au/locations/sydney/) [Melbourne](https://vapt.com.au/locations/melbourne/) [Brisbane](https://vapt.com.au/locations/brisbane/) [Perth](https://vapt.com.au/locations/perth/) [Adelaide](https://vapt.com.au/locations/adelaide/) [Canberra](https://vapt.com.au/locations/canberra/)

## Company
- [Methodology](https://vapt.com.au/methodology/)
- [About](https://vapt.com.au/about/)
- [FAQ](https://vapt.com.au/faq/)
- [Privacy](https://vapt.com.au/privacy/)
- [Contact](https://vapt.com.au/contact/)

## Insights
- [How to scope a web application pentest](https://vapt.com.au/blog/how-to-scope-a-web-application-pentest/)
- [APRA CPS 234 and security testing](https://vapt.com.au/blog/apra-cps-234-security-testing/)
- [Essential Eight and penetration testing](https://vapt.com.au/blog/essential-eight-penetration-testing/)
- [ISO 27001 penetration testing in Australia](https://vapt.com.au/blog/iso-27001-penetration-testing-australia/)
- [Pentest cost in Australia](https://vapt.com.au/blog/penetration-test-cost-australia/)
- [Pentest vs vulnerability scanning](https://vapt.com.au/blog/penetration-testing-vs-vulnerability-scanning/)
- [What is penetration testing?](https://vapt.com.au/blog/what-is-penetration-testing/)