| Unit |
What it covers |
Price |
| External host unit |
One external IP, hostname, or exposed service stack |
$___ |
| Internal segment unit |
One boundary relevant to lateral movement and control validation |
$___ |
| Web application unit |
One application with defined roles and authentication flows |
$___ |
| Cloud environment unit |
One AWS, Azure, or GCP boundary |
$___ |
| Retest unit |
Validation of fixes for agreed findings and paths |
$___ |
Internal work is not priced per host. Internal scope is driven by boundaries and effort drivers such as segments, identity complexity, defensive controls, and high value targets.
