Published by Excession Labs. We also sell penetration testing, and we are one of the providers in the table. How we compare

Cure53

Cure53, Berlin, Germany, audits web and mobile apps, cloud and server setups, crypto and source code. Its site hosts a public archive of client-approved reports.

Visit Cure53 Back to comparison

Last checked 9 November 2026. Facts come from Cure53's own public pages, linked below.

At a glance

TypeBoutique consultancy
HeadquartersGermany
Services listedWeb application penetration testing, Mobile app penetration testing, Cloud penetration testing, Source code review source
Deliveryhuman-led Manual black-box, white-box and source code audits.
ScopeWeb apps: yes APIs: not published Cloud: yes Network: not published Mobile: yes AI apps: not published
Pricing modelcustom quote
TurnaroundNot published
RetestingNot published. The site says assignments do not end with the report and that critical bugs are usually fixed by report time. source
Sample reportpublic source
Compliance mentionedNot published
IntegrationsNot published

Pricing

Prices are not published. You need to ask for a quote.

No prices are listed. Payment options named include card-style methods and BTC, BCH, XRP, ETH, Bill.com, Deel and Veem.

Credentials

No credentials with public evidence found.

Our assessment

Editorial judgment by Excession Labs, based on the facts above. Not a rating.

Good fit when

Software, crypto and privacy-tool teams that want a small senior team and are comfortable with a public report if they approve it.

Tradeoffs

No prices, turnaround, formal retest terms or certifications are published. Reports are public only when the client asks for it.

Sources

  1. Cure53 homepage (checked 9 November 2026)

See something wrong or out of date? Send a correction.

Compare with

Compare like with like

An automated scan, a manual test and annual credits are different units. Check scope, delivery and retest terms before price.