Security scans

Three reports, priced by how the audit actually works. OWASP is a picture of one site today. PCI wants a scan every quarter. SOC 2 Type II is a stretch of months, not a screenshot. A CPA firm signs the SOC 2 letter. A QSA signs the official PCI letter. I produce the evidence they ask for.

Email greg@ableadmins.com Call (832) 977-1356 All offers

Why the prices are split this way

A single compliance package hides the clock. Buy the report that matches the clock. Email me the URL, the AWS account if the report is about the cloud, and who the auditor is if you already have one. I send a Stripe link for the price on this page. No hourly meter on the report itself.

Report Price What you get
Able OWASP $349 once OWASP ZAP report for one public site, mapped to the OWASP Top 10, plus one recheck within 30 days. Add a monthly rescan for $79.
Able PCI $149/mo Quarterly external technical scan and a PCI DSS gap sheet for one site. A one-time snapshot is $399. This is scan evidence for your SAQ. It is not a QSA Report on Compliance.
Able SOC 2 $2,500, then $399/mo A readiness report mapped to the Trust Services Criteria, then a monthly evidence pack for the audit window. The CPA firm still issues the SOC 2 opinion. Readiness alone, with no retainer, is $2,500.

This is for

  • A customer, bank, or insurer asked for OWASP, PCI, or SOC 2
  • You want the report before you hire the CPA or QSA
  • You already have the auditor and they want evidence, not another slide deck
  • One public site, or one AWS account you can grant read-only

What this is not

  • Not a SOC 2 Type I or Type II opinion. A licensed CPA firm signs that.
  • Not a PCI QSA Report on Compliance or Attestation of Compliance.
  • Not a promise that the scan comes back clean.
  • Not a substitute for Able Rescue if the site is down tonight. That is still $199.

How a report gets made

  1. Email greg@ableadmins.com or call (832) 977-1356. Send the URL and, for SOC 2 or a cloud PCI check, read-only access to the AWS account.
  2. The scan runs from an AWS server outside your network. It is not run from inside your LAN. OWASP is a passive ZAP pass unless we agree on an active test window.
  3. You log in at scans.ableadmins.com to read the report. If a finding needs a response, the page asks for one and I see it.
  4. The recheck or the monthly evidence pack follows the price you bought. Fixing the findings is separate. That is Rescue, Retainer, or a scoped day.

Same engine, two desks

Able Admins customers read their reports at scans.ableadmins.com. The IT Engineer Group customers, including Freightgate, use scans.theitengineergroup.com. Same system, separate customer lists. If you want the findings fixed and someone in the room with the auditor, that engagement is on the TITEG side: OWASP $1,500, PCI readiness $3,500 or $500/mo, SOC 2 program $7,500 plus $1,500/mo.

Email greg@ableadmins.com Call (832) 977-1356

Prices are for one public site or one AWS account. Extra sites are quoted before I start. Questions: contact.