Pricing guide
VAPT cost in India
Updated
A VAPT (vulnerability assessment and penetration test) from OpsInfinity costs ₹44,999 for a single web app or API and ₹89,999 for a combined web app and API engagement, excluding 18% GST. Multi-app, cloud, and network scopes are quoted individually. Testing takes 5–10 days for a single target and 10–15 days for web plus API, and retesting after fixes is included.
VAPT & Security packages and prices
| Package | Price | Scope and timeline |
|---|---|---|
| Startup VAPTFocused penetration test for one application — typical for early-stage SaaS and SMB web products. | ₹44,999per scope | Excl. GST · Single web app or API · 5–10 days |
| Growth VAPTBroader coverage for products with multiple attack surfaces and compliance expectations. | ₹89,999per engagement | Excl. GST · Web + API · 10–15 days |
| Enterprise SecurityFor regulated industries and complex environments spanning multiple systems. | Custom quote | Multi-app, cloud, and network scopes quoted individually |
What changes the price
Number of targets in scope
Each web application, API, mobile backend, or cloud account is a separate target. More targets means more testing days.
User roles and authenticated areas
Testing every role (for example customer, staff, and admin) takes longer than testing a public site, but it is where most access-control flaws are found.
Size of the application
The number of pages, API endpoints, and business workflows such as payments or file uploads sets how much manual testing is needed.
Testing approach
Black-box testing starts with no inside knowledge. Grey-box testing uses test accounts and documentation and usually finds more in the same time.
Compliance reporting
Reports prepared for SOC 2, ISO 27001, or a customer security review may need specific evidence, mapping, or an executive summary.
Environments
Testing staging and production separately, or testing infrastructure and cloud configuration as well as the application, increases scope.
Frequently asked questions
How much does VAPT cost in India?
OpsInfinity VAPT starts at ₹44,999 (excl. GST) for a single web app or API and ₹89,999 for web plus API. Larger multi-app, cloud, and network scopes are quoted after a scoping call.
Are VAPT prices inclusive of GST?
No. Prices are exclusive of 18% GST. A formal quote with the tax breakdown is shared before testing starts.
How long does a VAPT take?
Testing takes 5–10 days for a single web app or API and 10–15 days for a combined web and API scope. Report delivery and retesting follow the testing window.
Is retesting included in the VAPT price?
Yes. Retesting after your team applies fixes is part of the standard VAPT deliverables, so you get confirmation that each issue is closed.
What does the VAPT report include?
Each finding has a severity rating (CVSS-aligned where applicable), proof-of-concept evidence, reproduction steps, and remediation guidance, plus an executive summary for management.
Get a VAPT quote in 24 hours
Share what needs testing or building. We reply within one business day with scope and a fixed quote.
- Registered as OpsInfinity Technologies LLP
- Prices published in INR, excl. GST
- Reply within one business day
- NDA available on request