Findings · measured, dated, recomputable
What does an independent MCP server security audit actually cost, and who publishes a price?
| Price points read firsthand from a vendor page | 10 |
| Vendors publishing a price on their own page | 3 |
| Lowest published price point | $299 |
| Highest published price point | $25,000 |
| Competitor offerings naming ANY customer | 0 of 6 |
| Rows from search snippets, excluded as unverified | 3 |
| Index observed | 2026-10-30 |
A buyer comparing MCP audit vendors has no reference point: the market is young, prices are quoted per engagement, and most vendors publish nothing. This index records what each vendor states on its own page, with the observation date, so a price can be compared rather than guessed. It includes our own prices on the same footing — a price index that excluded the publisher would be advertising, not reference.
Each row is read directly from the vendor's own published page and stamped with the date it was read. Rows sourced from a search-result summary are stored but marked unverified and are EXCLUDED from every figure above, because a snippet is not a measured price. Customer evidence is counted only when the vendor names a customer, testimonial, case study or audit count on its own page; absence is recorded as absence, never inferred as a judgement about quality.
The files these figures were derived from, on the machine that published this page
/home/marcus/state/market-prices/mcp-audit-price-index.jsonl
Our own scope and published pricing
Built 2026-10-30T23:17:01.526Z · JSON