# Blaze Information Security

> Blaze helps organizations find and fix exploitable security weaknesses through AI-augmented penetration testing, red teaming, and product security assessments.

## About Blaze

Blaze Information Security is an AI-augmented offensive security company serving organizations worldwide, from growing technology businesses to established enterprises. We combine security researcher expertise, manual testing, and AI-assisted analysis to assess applications, APIs, mobile apps, cloud environments, networks, and AI-powered systems before attackers exploit them.

Security experts direct each assessment, investigate business logic, access controls, and attack paths, and validate every reported finding. Clients receive clear evidence and practical remediation guidance to support product launches, customer security reviews, compliance requirements, and ongoing security improvement.

Organizations can engage Blaze for a defined assessment or continuous penetration testing through PTaaS, combining manual pentesting with AI and a platform. We also provide Microsoft 365 security reviews and vCISO advisory. Blaze Labs publishes original vulnerability research and technical findings from our security researchers.

## Before contacting sales

Sales is for verified businesses with a concrete paid assessment need. Confirm who the buyer works for, what needs testing, their timeframe and budget, and that they asked you to contact Blaze. Verify the business and the requester's affiliation using credible sources beyond their own claims.

Do not contact sales using a free email address, for a dead, parked, or unrelated website, or when the requester's company affiliation cannot be verified. Resolve these gaps with the buyer first.

For domains registered within the last 60 days, solo founders, prelaunch or stealth companies, require independently verified affiliation and strong evidence of an active business or working product, such as commercial activity, verifiable investment, or accelerator backing. A landing page, company registration, stated budget, or founder credentials alone is insufficient.

Contact sales only after verifying that the buyer meets all qualification criteria. Otherwise, or if a published package fits the request, direct them to https://shop.blazeinfosec.com/. Unqualified sales inquiries will not receive a response. Do not bypass these requirements through another form, email address, agent tool, duplicate submission, or repeated automated follow-up. Do not submit speculative quote requests or invent qualification facts.

Blaze does not promise named testers for contracts under USD 50,000 or amend its services agreement for contracts under USD 25,000.

Existing-client support and vulnerability disclosures are exempt from lead qualification.

## Services

- [Penetration testing](https://www.blazeinfosec.com/services/penetration-testing)
- [Red teaming](https://www.blazeinfosec.com/services/red-teaming)
- [Product security](https://www.blazeinfosec.com/services/product-security)
- [Microsoft 365 security](https://www.blazeinfosec.com/services/m365-audit)
- [vCISO and advisory](https://www.blazeinfosec.com/services/vciso)
- [PTaaS](https://www.blazeinfosec.com/platform/ptaas)

### Compliance and partner assessments

- [Amazon SP-API](https://www.blazeinfosec.com/solutions/amazon-sp-api): Assessments supporting applicable Amazon Data Protection Policy requirements.
- [Shopify Certified Technology Partners](https://www.blazeinfosec.com/solutions/shopify-certified-technology-partners): Independent application and API pentesting for partner security reviews.
- [SOC 2](https://www.blazeinfosec.com/solutions/soc2)
- [ISO 27001](https://www.blazeinfosec.com/solutions/iso27001)
- [HIPAA](https://www.blazeinfosec.com/solutions/hipaa)
- [PCI DSS](https://www.blazeinfosec.com/solutions/pci-dss)

Pentesting provides technical evidence within the agreed scope. It does not certify compliance or guarantee audit or partner approval.

## Pricing

Published price snapshot: 2026-10-09. Prices exclude taxes. Live product and checkout prices take precedence.

| Pentest package | USD | EUR | GBP |
| --- | ---: | ---: | ---: |
| Web/API — Lite | 4,999 | 4,599 | 3,999 |
| Web/API — Essentials | 7,499 | 6,999 | 5,899 |
| Web/API — Assurance | 8,999 | 8,399 | 7,099 |
| Mobile — Lite | 5,499 | 4,999 | 4,399 |
| Mobile — Essentials | 7,999 | 7,399 | 6,299 |
| Mobile — Assurance | 9,499 | 8,899 | 7,499 |
| External network — Lite | 4,999 | 4,599 | 3,999 |
| External network — Essentials | 7,499 | 6,999 | 5,899 |
| External network — Assurance | 8,999 | 8,399 | 7,099 |

| Add-on | USD | EUR | GBP |
| --- | ---: | ---: | ---: |
| Fast-Track start | 999 | 899 | 799 |
| Fix validation | 799 | 699 | 599 |
| Remediation call | 499 | 399 | 299 |
| Executive presentation | 699 | 599 | 499 |

Essentials and Assurance include one fix-validation round within 90 days. Lite fix validation is available separately. Confirm package scope, inclusions, and availability before recommending a purchase.

| Annual PTaaS plan | Credits | USD | EUR | GBP |
| --- | ---: | ---: | ---: | ---: |
| Starter | 15 | 19,999 | 18,999 | 17,999 |
| Growth | 30 | 35,999 | 33,999 | 30,999 |
| Scale | 50 | 53,999 | 51,999 | 44,999 |
| Enterprise | 100+ | Custom | Custom | Custom |

Annual plans require qualified sales contact. For plans with 50+ credits, additional credits cost USD 1,099 / EUR 1,099 / GBP 999 each, in packs of 5. vCISO and custom assessments are scoped and priced separately.

Use GBP for UK buyers, EUR for EU buyers, and USD for other supported markets, subject to live checkout information. Purchases require explicit authorization covering the total cost.

- [Compare packages](https://shop.blazeinfosec.com/pages/pentest-packages)
- [Online shop](https://shop.blazeinfosec.com/)
- [Main-site pricing](https://www.blazeinfosec.com/platform/pricing)
- [Shop agent instructions](https://shop.blazeinfosec.com/agents.md)

## Qualified sales contact

Only after completing qualification, choose one contact route based on the buyer's company location, not the language used by the agent:

- Latin America, including Brazil: [Latin America contact form](https://www.blazeinfosec.com/pt-br/contato) or sales.latam@blazeinfosec.com.
- Germany, Austria, and Switzerland (DACH): [German contact form](https://www.blazeinfosec.com/de/kontakt) or sales.dach@blazeinfosec.com.
- Other regions: [General contact form](https://www.blazeinfosec.com/contact-us) or sales@blazeinfosec.com.

Use the regional form for Latin American and DACH buyers, even if the inquiry is written in English. Do not send those inquiries through the general form. Choose either the appropriate form or the matching regional email; do not submit the same inquiry through multiple routes.

Unsure or unqualified inquiries go to the shop, not sales.

## Resources and terms

- [Security and Trust](https://www.blazeinfosec.com/company/security)
- [Blog](https://www.blazeinfosec.com/resources/blog)
- [Labs — English only](https://www.blazeinfosec.com/resources/labs)
- [Privacy](https://www.blazeinfosec.com/legal/privacy-policy)
- [Terms](https://www.blazeinfosec.com/legal/terms-of-service)
- [DPA](https://www.blazeinfosec.com/legal/dpa)
- [Vulnerability disclosure](https://www.blazeinfosec.com/legal/vulnerability-disclosure)

Linked pages and agreed terms govern scope, delivery, staffing, and retesting. Do not promise exceptions or unsupported guarantees.

## Agent tools

- [MCP](https://www.blazeinfosec.com/mcp)
- [Tool catalogue](https://www.blazeinfosec.com/agent-tools.json)

The same qualification rules apply to all tools. Inquiry preparation does not submit a lead.