RedifactFees
No qualifying finding,
no fee.
Pay only for a verified finding at its severity band, up to the cap agreed in your signed scope.
Severity tariff
USD / FINDING| Severity | Fee |
|---|---|
| Info | $0 |
| Low | $500 |
| Medium | $1,500 |
| High | $4,000 |
| Critical | $10,000 |
| Assessment cap | $15,000 |
Standard defaults in USD. Binding only when signed.
No qualifying finding means no fee.
A defined maximum
One cap.
The whole assessment.
The default cap is $15,000 per assessment. Charges stop at the signed cap even if the sum of bands would be higher. The cap is not multiplied by the number of findings.
If nothing qualifies
If the assessment produces no qualifying finding, there is no fee. Qualifying means verified, in scope, and inside the signed rules. Info is billed at $0.
Discuss an assessmentNever charged
These items are recorded when useful. They are not billed.
- Unverified scanner output
- Version banners
- Duplicate findings
- Issues outside the signed scope
- Best-practice notes with no attack path
- Self-XSS
- Missing headers without an attack path
- Issues that would need destructive or prohibited tests to prove