Securitum
Krakow penetration testing company that publishes day rates and fixed price ranges for its engagements
Quick Overview
| Company | Securitum Audyty Sp. z o.o. |
|---|---|
| Category | Bug Bounty Platforms |
| Headquarters | Krakow, Poland |
| Founded | 2009 |
| EU Presence | Yes - Poland (EU) |
| Data Location | Not stated on the pages checked |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Web, mobile, infrastructure and cloud pentests, red teaming, source code review, configuration analysis, OSINT, social engineering, SSDLC implementation, trainings, public reports |
| Pricing | Time and materials EUR 640 to 890 per man day; fixed projects typically EUR 3,500 to 14,000 (vendor pricing page) |
| Best For | Teams that want a manual pentest with a transparent price range |
| Replaces | HackerOne, Bugcrowd, pentest-as-a-service |
Detailed Review
Securitum's platform terms name Securitum Audyty Sp. z o.o., Siostry Zygmunty Zimmer 5, 30-441 Krakow, with a Polish tax ID and National Court Register number. The about page says the company was founded in 2009 and counts almost 2,000 pentests in the last three years.
It is a services firm: there is no crowd and no reward pool, so it fills the pentest part of this category rather than the bounty part.
Pricing You Can Read
The pricing page describes two models. Time and materials uses a rate of EUR 640 to 890 per man day depending on duration, team size and remote or on-site mode. Fixed price engagements typically take one to four weeks for a single application and cost EUR 3,500 to 14,000.
The page also lists the scoping questions Securitum asks for web, mobile and infrastructure tests, which lets you estimate an engagement before calling.
Scope of Services
The service list covers web application, mobile, infrastructure and cloud pentests, red teaming, source code review, configuration analysis, OSINT and desktop and console applications. SSDLC implementation and trainings sit alongside.
Public reports and a Pentest Chronicles section show example output.
Where It Fits
Securitum suits a defined test of a defined system. If you want continuous discovery by many researchers, a bounty from YesWeHack or Intigriti covers what a time-boxed test cannot.
Limitations to Consider
A pentest is a snapshot: findings reflect the weeks of the engagement, and Securitum has no continuous program or researcher crowd on the pages checked. The published prices are ranges for typical scopes, not a quote. The site describes itself as focused on Central and Eastern Europe, so buyers elsewhere should check availability and language. For continuous crowd testing see YesWeHack.
Who Should Use Securitum
Companies that need an audit-style pentest with a stated budget range, for example before a release or a compliance review.
Pros and Cons
Pros
- Day rates and fixed ranges published
- Polish sp. z o.o. with register number published
- Wide scope list from web to red teaming
- Public reports as examples
- Trainings available
Cons
- Point-in-time testing only
- No researcher crowd or bounty
- Prices are ranges, not quotes
- Focus on Central and Eastern Europe
Alternatives to Securitum
Other European bug bounty platforms worth comparing before you decide:
YesWeHack
France · Paris bug bounty and exposure platform hosted in an EU private cloud
Intigriti
Belgium · Antwerp bug bounty platform with managed VDP and PTaaS
Yogosha
France · Vetted researcher community for pentests and private bounties
Detectify
Sweden · Stockholm attack-surface and application scanner with ethical-hacker payloads
See all European bug bounty platforms or compare them directly against HackerOne on our alternatives page.
Frequently Asked Questions
The pricing page gives EUR 640 to 890 per man day on a time and materials basis, and EUR 3,500 to 14,000 for typical fixed price projects of one to four weeks.
No. It is a penetration testing company; engagements are run by its own team on a defined scope.
The platform terms name Securitum Audyty Sp. z o.o. in Krakow, Poland.