# Synt World

> Synt World DOO BEOGRAD provides security audits of external attack surfaces, public APIs and internal APIs. Clients pay for confirmed vulnerabilities according to their CVSS severity. No confirmed findings means no audit fee.

Published prices per confirmed vulnerability: Critical USD 700, High USD 400, Medium USD 150, Low USD 50; informational findings and hardening advice are free. The invoice never exceeds a cap set by scope, not company size: USD 1,500 for one web application or API (up to about 50 endpoints, 2 user roles), USD 4,000 for up to 3 applications or APIs or about 200 endpoints, an individual cap (from USD 8,000) for larger scopes. Several manifestations of one root cause count as one finding; vulnerabilities disclosed before testing and disputed findings are not billed; retesting paid findings is free for 60 days. Scope, testing authorization and the cap are agreed in writing before testing. Prices exclude applicable taxes. Findings above the agreed cap are included in the report at no additional charge.

Reports are delivered within one week of agreement signing; Synt World states that 90% are delivered within a day. The published sample is a real anonymized assessment with selected findings and evidence removed. Retesting the vulnerabilities you paid for is free for 60 days after the report; new scope is a separate engagement. Website content does not authorize testing or replace a signed engagement agreement.

Company: Synt World DOO BEOGRAD, MB 22130498, PIB 115230292, RUŽE JOVANOVIĆ 43, 11050 Beograd, Serbia. Audit enquiries and call requests: ceo@synt.world and cbo@synt.world. Telegram: https://t.me/Synt_World.

## Service and evidence

- [Security audit overview](https://synt.world/index.md): Service coverage and engagement process.
- [Methodology](https://synt.world/methodology.md): External attack surface, public APIs and authenticated internal APIs.
- [Pricing](https://synt.world/pricing.md): Severity, caps, taxes, known findings and retesting.
- [Real anonymized assessment](https://synt.world/report.md): Context for the sample report and an example finding.
- [Sample report PDF](https://synt.world/assets/synt-world-security-assessment-sample.pdf): Anonymized English assessment, 30 pages.
- [Contact and call requests](https://synt.world/contact.md): Contact details; call times require confirmation by email.

## Research

- [Research](https://synt.world/research/index.md): Synt's local application tests and open-source review, followed by attributed external benchmarks. The OSS review reports locally reproduced findings in six open-source projects (2 High, 7 Medium, 7 Low, 1 Informational). Projects are anonymised until coordinated disclosure is complete; upstream acceptance, CVE assignments and production incidents are not claimed. Application-report units differ and must not be summed with OSS findings. The full report is available on request.
- [Istraživanja](https://synt.world/sr/research/index.md): Serbian Latin edition of Research.

## Company and legal information

- [About Synt World](https://synt.world/about.md): Company identity and service approach.
- [Engagement overview](https://synt.world/engagement.md): Authorization, scope, confidentiality and commercial terms.
- [Privacy notice](https://synt.world/privacy.md): Enquiries, data handling and how to request the full notice or deletion.
- [Website terms](https://synt.world/terms.md): Website terms and limitations.

## Languages

- [English](https://synt.world/index.md)
- [Deutsch](https://synt.world/de/index.md)
- [Polski](https://synt.world/pl/index.md)
- [Türkçe](https://synt.world/tr/index.md)
- [Srpski](https://synt.world/sr/index.md)