You can't expect a manual pentest for €35 or anything near that ballpark. A proper pentest includes manual labour (such as the mentioned examples). It also inc

You can't expect a manual pentest for €35 or anything near that ballpark. A proper pentest includes manual labour (such as the mentioned examples). It also includes a lot of documentation in the report. For example, recon data. They could also include we checked X for Y but did not found any issues. Nothing is 100% secure, and if you don't find anything after extensive manual testing it is, well, going to be a boring report, because you still have to document everything. It also feels like a failure (which is why the honeypot was a little bit mean, though clever as well given goal of post). CEH is a joke btw. No serious pentester puts that on their resume. Its a waste of time to get thst certificate. OSCP is the gold standard. In short, you pay peanuts you get monkeys and CEH is a red flag. OSCP is a green flag.