Security and Accessibility Audits
Independent, open-book audits of the applications and documents your organization is responsible for. As a cybersecurity firm, we treat document accessibility the same way we treat application security: unaddressed gaps are a legal liability, and independent evidence should carry more weight than a vendor's own self-attestation.
Fixed-Price Audits
Published tiers and pricing, a request form, and an onboarding call before anything is invoiced. A signed attestation letter is available as an optional add-on to either audit.
-
ADA/WCAG Document Accessibility Audits
For state, local, and territorial government agencies preparing for the ADA Title II compliance dates.
- Executive Brief and WCAG findings summary
- Findings CSV for your remediation team or vendor
- Document provenance, tracing defects to the templates and workflows behind them
- Candidates for the archived and preexisting document exceptions
Fixed price from $4,950 As low as $0.50 per document Two-week engagement
Request an Audit for document accessibility Details and Pricing for document accessibility audits
-
Authentication & Access Control Audits
For software companies, HIPAA-covered entities, and government agencies with custom web applications.
- Open-book code review and targeted testing, based on OWASP ASVS
- Focus on password reset and authentication bypass
- Proof tests for every confirmed finding
- One retest within 60 days
Fixed price from $5,200 Timeline set on the onboarding call
Request an Audit for authentication and access control Details and Pricing for authentication and access control audits
Security Questionnaire Help
A customer or agency sent you a security questionnaire? Our security questionnaire response help starts at $750 for a three-hour expert engagement: a call, a review of your questions and draft answers, and triage of what to answer, what to strengthen, and what to fix.
Custom-Quoted Assessments
Broader reviews scoped to your application, program, or AI features, quoted after a scoping call. Each page ends with a short form to request one.
- Application Vulnerability Assessment A code-level assessment of your whole custom application against OWASP ASVS or MASVS, with an audit-style findings report.
- Secure Development Program Assessment (OWASP SAMM) Your organization's secure development maturity, measured with OWASP SAMM, in partnership with New Oceans Enterprises for the policy and vCISO side.
- AI Agent and LLM Security Assessment A code-level review of the AI features in your applications and what they can reach.
The application vulnerability assessment is built on our security code review and the OWASP ASVS and MASVS standards.
Where We Work
Rietta is headquartered in Alpharetta, Georgia, in Metro Atlanta, and our home region is the Southeast, including Georgia, Florida, Alabama, Tennessee, South Carolina, and North Carolina. We take on engagements nationwide, and most are handled remotely.
After the Audit
Every engagement starts with your environment and compliance obligations, not a one-size-fits-all checklist, and ends with a report your team can act on. For an additional fee, we provide follow-up developer training, with quizzes and completion certificates your team can use toward contractual training obligations; see our developer security training. Fixing what an audit finds is the job of our vulnerability management and remediation solutions. Not sure which audit fits? Talk to us about your audit needs.