Dunicot A cybersecurity consultancy and advisory firm.

Contact · Response within one business day

Book an engagement.

Email reaches our engagement team directly, not an outsourced sales queue. Include what you can from the list below and a fixed quote usually follows within one business day.

Send the scope

Six answers is enough to quote.

A fixed quote usually follows within one business day. No sales sequence, no CRM drip, this reaches our engagement team directly.

No newsletter, no CRM sequence, no outsourced sales queue. This reaches our engagement team directly. A mutual NDA can be signed before you describe anything sensitive. See the privacy policy.

Coverage

Wherever your systems are.

Work delivered across 17 countries on four continents, run from our two offices. Remote delivery works in any timezone that shares a few hours of overlap with one of them: Karachi covers Europe, the Gulf, South Asia and Southeast Asia, and Sheridan covers the Americas. Between the two, most of the working world is a same-day conversation.

Where an engagement needs someone in the room, for internal network scope, branch and terminal work, a scoping workshop or an executive readout, testers travel to you from Karachi. That is routine across the Gulf and Pakistan, and arranged anywhere else on request.

Current engagement coverage: Pakistan, United States, Canada, United Kingdom, European Union, Qatar, United Arab Emirates, Saudi Arabia, Kuwait, Bahrain, Oman, Singapore, New Zealand, Australia, South Africa, Kenya, Nigeria.

See all locations

Commercial: questions

How much does a penetration test cost?

Cost follows scope, not a price list: the number of applications, roles and endpoints, whether internal network testing is included, and whether source code is in scope. A fixed quote is issued after a short scoping call, with no hourly billing and no change orders mid-engagement unless you change the scope.

Do you offer fixed-price engagements?

Yes. Scope is defined in writing and the price is fixed against it. If something in scope turns out to be materially larger than described, you are told before any additional work is done rather than after.

Will you sign an NDA before we share anything?

Yes, before scoping, not after. A mutual NDA is standard, and your own template is acceptable. Engagement data is handled under a certified ISO/IEC 27001 ISMS and destroyed on closure.

How soon can a penetration test start?

Typically one to two weeks from signed scope, depending on the current calendar. Engagements driven by an audit date or a customer deadline can often be brought forward. The constraint is usually your side’s account provisioning, not the calendar.