Skip to content

Built for pentest consultancies

Know the scope.
Protect the margin.

ScopeMargin turns web-application complexity into an explainable effort range and a price your firm can stand behind. Keep the reasoning. Learn from delivery.

Explore an estimate Explore the approach

One workspace · Your economics · Your team

Explore without an account · Hosted purchasing is not open yet

Transparent calculationsYour firm’s economicsHuman approvalA history you can learn fromNo black-box pricing

01 — The gap

A quote is a
commercial decision.

When a quote keeps the number but loses the assumptions, delivery variance is harder to explain. A useful record connects the scope, the commercial decision and the work that followed.

ScopeMargin sits between your scoping conversation and your proposal. It records what was assumed, what it cost, and what actually happened.

The principle

Quoting should
explain itself.

Scoping is judgment work and it should stay that way. What should not stay manual is the arithmetic beneath it — the drivers, the allowances, the margin, and the record of why a number was approved.

Deterministic · Versioned · Reviewable
01
Scope factsRoles, workflows, APIs, uncertainty
02
Original recommendationModel version + economic settings
03
Approved quoteAdjustments, reasons + approver
04
Actual effortDelivery comparison + correction history

The original decision stays intact.

02 — The loop

Better decisions,
from scope to delivery.

Give the next quote a stronger foundation. Then keep enough history to make the one after it better.

  1. 01Scope
    Roles & permissions3 roles
    Multi-tenancyIncluded
    API endpoints45
    Retest allowanceExplicit

    Make the scope explicit.

    Follow a web-app questionnaire that surfaces complexity, missing facts and delivery constraints. Bring your customer’s technical owner into the questions that matter.

  2. 02Decide
    Expected effort18.2 d
    Delivery cost$14,560
    Recommended price$36,400
    Projected margin60%

    See the commercial decision.

    Review effort, price and projected margin together. Inspect the drivers, adjust with a reason, and preserve the original recommendation.

  3. 03Learn
    Model recommendationKept
    Approved quoteKept
    Actual deliveryCompared
    Correction historyVisible

    Learn from the work.

    Enter delivered effort or review a sanitized CSV. Compare the estimate with reality, with sample sizes and data limitations visible before drawing conclusions.

03 — The estimator

Every number, accounted for.

Change the example below and watch the estimate move. Deterministic rules, fictional scopes, nothing saved.

scopemargin · estimate explorer

Estimate explorerSynthetic example
Web application pentest

A multi-role SaaS application

  • 3 roles
  • Tenant boundary
  • 45 API endpoints
Estimated delivery effort
16.4–20.9tester-days
Preparation
0.5 d
Testing
14.6 d
Reporting
1.8 d
Coordination
0.8 d
Retest
0.5 d
Recommended price$36,400
Expected cost$14,560

18.2 expected days · USD · Illustrative economics

What’s behind this estimate?
  • 6 major workflows +1.6 d

    Additional workflows add business-process and authorization paths.

  • 3 authenticated roles +1.0 d

    Each distinct privilege boundary creates authorization and workflow combinations to examine.

  • Simple tenant segregation +1.0 d

    Tenant boundary testing is included.

Example economics: $800 cost per tester-day, $1,800 day rate and 60% target gross margin. These are illustrative inputs, not market rates.

Price uses 18.2 expected days and the highest of the day-rate, target-margin and minimum-engagement prices, then applies a 0.0% risk allowance.

Model: web-app-rules-v0.1.2. Rules are provisional. A firm reviews its complete scope and economics before approving a real quote.

Deterministic estimates. Fictional scopes. Nothing is saved.

04 — What it keeps

Keep your judgment.
See the whole picture.

Your senior tester knows the work. ScopeMargin makes that knowledge easier to inspect, challenge and carry into the next engagement.

Effort drivers

Every added day traces to a scope characteristic and a versioned rule, not an opaque score.

Uncertainty range

A low and high band rather than a single number, so the unknowns stay part of the conversation.

Your economics

Day cost, day rate, target margin and delivery allowances are your firm’s inputs, not our defaults.

Reporting & retest

Make reporting and retest allowances explicit, so the quote records which delivery work is included.

Reasoned overrides

Adjust effort or price and the original recommendation survives alongside the reason it changed.

Delivery comparison

Actual effort returns to the record, so the next quote starts from what really happened.

05 — The fit

One better workflow.
Keep the rest of your stack.

Start with one quote alongside your current process. There’s no historical migration project between you and the first useful estimate.

Your existing tools

CRM · email · portal

Bring the scope context

ScopeMargin

Scope · estimate · approve · compare

Keep the commercial reasoning

Your delivery process

Proposals · timesheets · reports

Return actual effort

Manual handoffs today. Native CRM, PSA and timesheet integrations are not available.

06 — Start here

Where did the
extra days go?

Compare quoted and actual tester-days with the free Scope Leakage Audit. Find the differences worth investigating before the next quote.

Run the private audit See the method

No account · No server upload · No AI processing

Delivery varianceSynthetic example
Quoted effort
Actual effort
+17.6%

Weighted effort variance across 27 fictional engagements

Extra effort is not automatically unbilled work. The audit separates supported financial impact from assumptions.

07 — Before you commit

Good questions.
Straight answers.

Built for fixed-scope web application pentests. Deliberate about what it does — and what is still in progress.

Compare plans
Do we need a demo call or have to send you data?

No. Explore the synthetic estimate on this page or run the free audit with a sanitized CSV in your browser. Neither requires a call, account or sharing your results. Standard plans are designed for verified signup, checkout and guided firm setup when enrollment opens. Email support is optional; enterprise requirements can also be discussed by email.

Is ScopeMargin a fit for our practice?

The first estimator is for firms scoping web-application penetration tests, including API features within those applications. Standalone API, network, mobile and cloud estimation are not available. The retrospective audit can compare historical assessment types, but that does not mean ScopeMargin can estimate every type of engagement.

Can we use ScopeMargin today?

The free Scope Leakage Audit is available without an account. Compare the self-service packages on our plans page; its availability notice shows when checkout is open. No pilot conversation is required. Enterprise requirements have a separate contact route.

Will we have to change our existing tools?

Start alongside your current process. The estimator supports customer-question text for email or a client portal, client-safe quote text for proposals, reviewed actual-effort CSV imports and an administrator JSON export. These are manual handoffs; native CRM, PSA and timesheet integrations are not available.

How are effort and price calculated?

Versioned rules turn scope characteristics into effort components and an uncertainty range. Your firm’s day cost, day rate, target margin and delivery allowances determine the price recommendation. The coefficients are provisional and require real-world validation. Your technical or commercial lead approves the final decision; AI does not control the calculation.

Can we override the recommendation?

Yes. The estimator preserves the original recommendation and a reason for an effort or price adjustment. Missing critical scope facts must still be resolved. Later, actual effort can be compared with both the model’s recommendation and the approved quote.

What do the plans include, and what are the limits?

All three standard plans include the same core scoping, pricing, quote and actual-effort workflow. Solo includes the owner; Boutique allows five members and Firm fifteen, including the owner. Pending invitations reserve seats. One workspace per account is supported. Automatic plan changes, billing-owner transfers, native integrations and enterprise SSO are not available. Review plan availability and service terms before purchasing.

What should we prepare for the first estimate?

Your tester-day cost, default day rate, target gross margin and reporting/retest assumptions, plus the main roles, workflows and boundaries of one web application. You do not need a CRM migration or historical import. The guided workflow flags missing critical facts before a quote can be approved.

What happens to data in the free audit?

Your sanitized CSV is processed in the active browser page. It is not uploaded, stored by ScopeMargin or sent to an AI provider. Reloading or clearing the page removes the active data. Downloaded reports remain on your device. Do not include client names, targets, credentials, findings or confidential artifacts.

What security controls are ready?

The public audit works without an account or CSV upload. Hosted estimator accounts remain closed while we configure and verify identity, MFA, tenant isolation, recovery and data handling. We do not claim SOC 2 or ISO 27001 certification, enterprise SSO or a production-verified customer storage service.

A better next quote starts
with a clearer picture.

Try the free audit Compare self-service plans

Checkout is being prepared. No sales call or pilot request is required.