Standard & Enterprise Plans
Three tiers built for African organizations — from startups needing a baseline scan to enterprises requiring continuous, always-on security operations.
African-Focused Packages
Built for Nigeria and African organizations, with pricing starting at $1,500 / month. Paid add-ons are available for additional assets, compliance frameworks (NDPR, CBN, BoG, POPIA), or expanded API scope. Contact us to discuss NGN invoicing.
Starter
Authorized scan + risk report
Ideal for startups, SMEs, and MVPs that need a verified vulnerability baseline without the complexity of a full engagement.
- Authorized web app & API vulnerability scan
- OWASP Top 10 & API Security Top 10 coverage
- Risk report with severity ratings
- Prioritized remediation list
- Email support within 1 business day
- Risk Assessment Report
- Prioritized Remediation Checklist
Standard
Full penetration test + remediation review
A complete, structured penetration test for growing companies in fintech, e-commerce, and digital banking that require a detailed findings report and guided remediation.
- Full web application penetration test
- API security testing & business logic analysis
- Detailed technical findings report
- Remediation review session included
- Book a 15-minute scoping call
- Re-test within 30 days of report delivery
- Detailed Penetration Test Report
- Remediation Review Session
- Certificate of Penetration Testing
Premium / Enterprise
Continuous testing · 24/7 monitoring · IR
Mission-critical, fully authorized continuous security operations for banks, payment platforms, and institutions under stringent regulatory oversight.
- Continuous authorized penetration testing
- 24/7 threat monitoring & anomaly detection
- Incident response with rapid containment
- Executive briefing & board-level reporting
- Priority support with dedicated analyst
- Regulatory compliance advisory (NDPR, CBN, POPIA)
- Continuous Security Posture Reports
- Incident Response Documentation
- Executive Briefing Deck
- Compliance Advisory Dossier
Factors That Determine Final Scope
Every technical architecture has a unique exposure profile. Here is how our engineers scope engagements.
Asset & Endpoint Count
Total web servers, cloud VPCs, databases, and network interfaces in scope.
API & Logic Complexity
Volume of microservices, payment gateways, and backend logic endpoints.
Compliance Requirements
Frameworks required: CBN, NDPR, BoG, POPIA, PCI-DSS, or ISO 27001.
Urgency & SLA Depth
Turnaround time, emergency mobilization, and remediation reporting depth.
Frequently Asked Questions
Need a Custom Cyber Defense Package?
Speak with a BTM Security engineer to evaluate your asset perimeter, compliance obligations, and receive a tailored proposal within 1 business day.