How much does a Magento security audit cost?

Fixed-price tiers, billed at $25/hr:

• Security Audit: $499 (~20h), OWASP-based audit, CVE scan, APSB gap analysis and a prioritised written report
• Audit + Hardening: $999 (~40h), everything in the audit, plus all missing patches applied, admin hardening, header/server hardening, WAF + bot protection and a re-scan
• Managed Security: custom retainer, continuous patch monitoring, quarterly re-audits and an emergency fast lane

Anything out of scope after the audit is quoted upfront, never billed silently.