LUMEN / 01 Exposure desk
Illuminate weak points. Harden what matters.
Security audits, vulnerability assessments, authorized penetration testing, and configuration work—scoped in writing, executed with care, delivered as clear reports.
LUMEN / 02
Weblume Labs LLC provides cybersecurity services that help businesses identify vulnerabilities, assess security risks, and strengthen the protection of their digital systems. Every engagement begins with a defined boundary and written authorization.
LUMEN / 03
Choose a surface and an engagement mode. The bench shows what gets illuminated, what stays out of frame, and a starting price.
LUMEN / 04
Starting prices reflect typical U.S. boutique cybersecurity floors for the scopes below—one revision on written recommendations included. Final quotes follow a short fit review.
From $4,500
A structured posture review of information-security controls for one defined environment—not a certification or SOC 2 attestation.
Starting scope: 1 environment · ~3–5 analyst days · excludes continuous monitoring and formal certification
From $3,500
Discovery and ranking of known weaknesses across an agreed host or URL set, with manual triage of scanner noise.
Starting scope: non-destructive assessment · no exploitation · not a penetration test
From $6,800
Human-led, permissioned testing against one target class under written rules of engagement—web app or external perimeter at the starting price.
Starting scope: 1 target class · quotes below ~$4,000 in this market are usually scans, not manual tests
From $2,800
Hardening pass focused on protective mechanisms for one agreed stack, with a clear before/after map.
Starting scope: 1 stack (perimeter, IAM, or endpoints) · ~2 analyst days · excludes ongoing admin or MDR
From $1,800
A standalone recommendations package and security report for technical and business readers. Included at no extra charge when bundled with ENG-01 to ENG-04.
Starting scope: rewrite from findings you supply or from prior work · no new testing
From $2,400
A working session that turns existing findings into an ordered, owner-assigned fix plan your team can execute.
Starting scope: planning only · excludes implementation of fixes
From $2,800
Post-fix verification that previously reported issues were addressed, under renewed or still-valid written authorization.
Starting scope: 1 target class · often ~35–40% of the original test when booked after our ENG-03 · no new discovery
From $1,800
A readout for leadership and technical staff on current exposure, risk language, and sensible next steps.
Starting scope: 2 sessions · no testing · no phishing simulation campaign
LUMEN / 05
A short path from authorization to documented findings.
Confirm ownership, contacts, and written permission for the systems in scope.
Lock targets, windows, intensity, and out-of-scope items before any testing begins.
Run the agreed audit, assessment, pen test, or configuration work inside that frame.
Deliver findings, recommendations, and a report your team can act on.
LUMEN / 06
Clarity protects both sides. Weblume Labs does not invent authority we do not have.
LUMEN / 07
Yes. Authorized penetration testing and any intrusive assessment require written rules of engagement and confirmation that you control the targets in scope.
A written security report with findings, severity context where applicable, and prioritized recommendations. Configuration work also includes handoff notes for the changes made.
No. Listed figures are starting floors for the scopes described and sit in the typical U.S. boutique range for that work. Larger estates, cloud-heavy scopes, multi-app pen tests, or tighter windows are quoted after a short intake review.
The company address is 710 E Main Street, Lexington, KY 40502. Engagements are typically delivered remotely for United States clients.
No. Security work reduces risk and improves clarity; it does not guarantee immunity from incidents.
LUMEN / 08
Tell us what you want illuminated. We reply with fit questions and a scoped proposal—not an automated quote.
