Talon · £499 + VAT

One-day security assessment of your web app and AWS account

We scan the application and the account, then send a PDF you can hand to an auditor, insurer or client — with a 30-minute walkthrough and a free re-scan within 14 days.

Talon at a glance

Price
£499 + VAT, fixed
Turnaround
One day
Scope
Web application and AWS account
You get
PDF report, 30 minute walkthrough call, free re-scan within 14 days
Tools
ZAP, Nuclei, Prowler

Process

How Talon works

From booking to a report you can hand to an auditor, in four steps.

  1. 1

    Book and brief

    A short call to confirm the target application, test credentials for logged-in scanning and read-only AWS access.

  2. 2

    Assessment day

    Application scanning with ZAP and Nuclei and an AWS account audit with Prowler, run by our engineers with safe, non-destructive settings.

  3. 3

    Report

    A branded PDF with every finding prioritised, mapped to OWASP, CIS, SOC 2, PCI DSS and NIST, with remediation steps.

  4. 4

    Walkthrough and re-scan

    A 30 minute call to go through the findings, then a free re-scan within 14 days to confirm fixes.

Why now

Why assessments get postponed

Manual pentests cost thousands

Good firms are booked out for months and charge £8k or more. You need answers now to unblock a client deal or an insurance application.

Free scanners give you noise

Free tools produce a wall of technical data. You need a prioritised, professional report with executive summaries and remediation steps.

You do not have a security team

You are a development team building product. Security expertise should not require a full-time hire or a boutique consultancy.

Coverage

What Talon covers

Application-layer scanning and an infrastructure audit together.

Web application assessment

Deep scanning of your web application, including authenticated areas behind your login.

  • OWASP Top 10 vulnerabilities
  • SQL injection and XSS testing
  • Crawl and attack surface mapping
  • Known CVE detection, 8,000+ templates

AWS infrastructure assessment

Audit of your AWS account configuration and resource security.

  • CIS AWS Foundations Benchmark
  • IAM, S3, EC2 and RDS audits
  • Lambda health and security analysis
  • Cost and idle resource identification

Fixed price

Talon security assessment

£499 + VAT

One-time fee. No subscription, no lock-in.

  • Authenticated web application scan
  • AWS infrastructure audit
  • Branded PDF report
  • 30-minute walkthrough call
  • Free re-scan within 14 days
Book your assessment

Frameworks

Mapped for auditors

Findings are mapped to the frameworks they usually ask for.

OWASP Top 10
CIS AWS Benchmarks
SOC 2 Controls
PCI DSS Compliance
NIST 800-53

Questions

Common questions

Is this a manual penetration test?

Talon uses the same industry-standard tools that pentesters use (ZAP, Nuclei, Prowler), configured by our engineering team. For most compliance and client requirements, this is exactly what's needed.

Will this satisfy my auditor?

Findings are mapped to OWASP, CIS, SOC 2, PCI DSS, and NIST frameworks. The report is designed for auditors, clients, and insurers.

What do you need from us?

Your app URL, test credentials for logged-in scanning, and read-only AWS access. We walk you through setup on a quick call.

Will the scan break anything?

We use non-destructive techniques and safe payloads. We recommend running against staging first if you have one, but production scans are routine.

Can you fix what you find?

Yes. Cloudavian is a software and AWS consultancy. We can remediate findings directly -- but there's no obligation. The report is yours regardless.

We're not on AWS. Can you still help?

The web application assessment works against any target regardless of hosting. We'd adjust scope and pricing for non-AWS infrastructure.

Sample

See what the report looks like

A sample Talon report — real findings, anonymised client. Leave an email and we will send it.

Next step

If you need a report for an auditor, insurer or client, Talon is built for that

Book the assessment, or start with the sample report.