Assessment maps known issues across agreed assets and ranks what to fix first. It is complementary to penetration testing, not a substitute when you need attack-path proof. A vulnerability assessment is UGX 20,000,000 to 50,000,000. A shorter written security check of one website or small system is UGX 1,500,000.