Fixed-Price Engagements

All tests include signed NDA & RoE. Upfront structure based on engagement duration and resource allocation.

Tier 1 — Basic Assessment

2 days engagement

Total Price $500
Upfront Payment 100% ($500)
Balance $0
Full upfront — short engagement

Tier 2 — Standard Assessment

6 days engagement

Total Price $1,500
Upfront Payment 50% ($750)
Balance 50% upon delivery
Balanced split

Tier 3 — Deep Assessment

12 days engagement

Total Price $3,000
Upfront Payment 40% ($1,200)
Balance 60% upon delivery
Extended scope

Tier 4 — Full Red Team

24 days full red team op

Total Price $6,000
Upfront Payment 30% ($1,800)
Balance 70% upon delivery
Maximum resource allocation

API · AI · Monitoring

Flexible payment terms tailored to specialized engagements.

API Security

API Hacking & BOLA/BFLA testing

Price Range $300 – $2,000
Upfront Payment 50%
Balance 50% upon delivery

AI LLM Pentesting

Prompt injection & model security

Price Range $250 – $2,500
Upfront Payment 50%
Balance 50% upon delivery

Infra Level Security

Daily monitoring & assessment

Rate $10/day – $300/month
Payment Terms 100% monthly in advance

24/7 Active Monitoring

Infrastructure + real-time CVE alerts

Rate $20/day – $600/month
Payment Terms 100% monthly in advance

Private & Public BBP Terms

Specialized payment structure for bug bounty programs. Fair for companies, fair for researchers.

For Companies / Clients

  • Validation Period: EzekielSec validates each vulnerability within 7 business days
  • Payment Due: Within 30 calendar days after validation confirmation
  • Late Payment: 10% late fee applied after 30 days; program paused until payment received
  • Dispute Resolution: Must be raised within 14 days of validation
30 days to pay after validation

For Security Researchers

  • Bounty Payment: Paid within 45 days after client payment is received by EzekielSec
  • Remediation Hold: Must wait until remediation is complete before public disclosure
  • Embargo Period: Standard 90-day coordinated disclosure window
  • Good Faith: No payment for duplicates, out-of-scope, or already known issues
Be patient — paid after client settles

Important Note for Researchers

EzekielSec pays bounties after receiving client payment. Researchers are expected to be patient and cooperate during the remediation phase. No public disclosure until remediation is confirmed and the embargo period ends. This ensures responsible disclosure and protects all parties involved.


Elite 24/7 Monitoring (Enterprise Grade)

Custom pricing and payment terms for enterprise clients requiring maximum coverage.

Infrastructure 24/7 Monitoring (Elite)

Daily security assessment + real-time CVE updates + Maltego integration

Pricing Contact for pricing
Payment Terms Custom enterprise agreement
Typical Structure 30% upfront, 70% net 30
Tailored for enterprise requirements
Quick Reference — Payment Summary
Service TypeUpfront %BalanceClient Payment WindowResearcher Payment Window
Tier 1 (Basic)100%0%Upon booking
Tier 2 (Standard)50%50% upon deliveryUpon delivery
Tier 3 (Deep)40%60% upon deliveryUpon delivery
Tier 4 (Red Team)30%70% upon deliveryUpon delivery
API / AI Services50%50% upon deliveryUpon delivery
Monitoring (Monthly)100%0%Monthly in advance
Private/Public BBP0%100%30 days after validation45 days after client payment
Enterprise (Elite)CustomCustomPer agreement

All services include signed NDA & Rules of Engagement (RoE). For any payment-related inquiries, contact finance@ezekielsec.com