Compare penetration testing providers on the facts that change the result
9 November 2026 is the date of the latest check. The table lists 66 penetration testing companies, and 21 of them publish at least one price. For each: what it tests, who does the testing, published prices with their units, turnaround, retesting and sample reports, each linked to the provider's own page with the date we checked it.
- Sorted A to Z, not ranked
- Unknown means "not published"
- No paid placement
- How we compare
67 of 67 rows shown: 66 providers and the publisher-owned row. Sorted A to Z, not ranked. Checked up to 9 November 2026.
| Provider | Delivery | Web apps | APIs | Cloud | Network | Mobile | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 7ASecurityBoutique consultancy, Ireland | human-led | Yes | ? | Yes | Yes | Yes | Yes | Custom quote | Not published | Free fix verification: 'verify your fixes, suggest improvements and… | Public |
| A-LIGNConsultancy | human-led | Yes | ? | Yes | Yes | ? | ? | Custom quote | Not published | Not stated. The page mentions RADAR monitoring between annual tests… | not published |
| AikidoApplication security platform, Multiple (United States, Belgium, United Kingdom) | automated | Yes | Yes | ? | Yes | Yes | Yes | $4,000 per assessment +1 more | TYPICAL Pentest: same-day results. The AI pentest page also says a… | Free retesting for up to 6 months, including checks for bypasses of… | Public |
| Astra SecurityPTaaS platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $2,999 per year (card also shows $199 per month) +3 more | Manual pentest: 10-15 working days. Pentest Auto: first report the… | Re-scans included: Auto 1, Expert 2, Enterprise 4; window 30 days… | not published |
| Bishop FoxOffensive security consultancy, United States | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Not published | Not published | Not published | not published |
| Black Hills Information SecuritySecurity consultancy, United States | human-led | Yes | ? | ? | ? | ? | Yes | Not published | Not published | Not published | not published |
| BreachLockPTaaS platform | hybrid | Yes | Yes | Yes | Yes | Yes | ? | Custom quote | Pentests can be scoped and started within 24-48 hours. | Free manual retests: 1 (Standard), 2 (Extended), custom (Extensive).… | on request |
| BridewellCyber security services provider | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | on request |
| BugcrowdPTaaS platform, United States | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Tests launch in under 72 hours; Standard: launch within 3 business… | Standard: one year of retesting with one report revision, for web… | Public |
| ClaranetManaged services and cyber security provider | human-led | Yes | Yes | ? | Yes | Yes | ? | Custom quote | Not published | Retesting is included as part of the engagement. | not published |
| CobaltPTaaS platform, United States | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $3,500 per test | Autonomous Pentest: findings in 24 hours. Annual tiers: start within… | Comparison table: free retesting for 6 months (Standard) or 12… | on request |
| Compass SecurityConsultancy, Switzerland | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | on request |
| Cure53Boutique consultancy, Germany | human-led | Yes | ? | Yes | ? | Yes | ? | Custom quote | Not published | Not published. The site says assignments do not end with the report… | Public |
| Cyberis (Cyberis Reply)Penetration testing and cyber security consultancy | human-led | Yes | ? | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | not published |
| CYBRIPenetration testing consultancy, United States | human-led | Yes | Yes | Yes | Yes | Yes | Yes | $5,000 starts at, per engagement +3 more | From 5 business days (Web Application and Custom), 10 (Web, API,… | Remediation testing is included in the $9,500 and $20,000 tiers.… | not published |
| DeepStrikePenetration testing consultancy, United States | human-led | Yes | ? | Yes | Yes | Yes | ? | Custom quote | Basic plan: start pentest within 48 hours. | The services page says free unlimited re-testing; the pricing page… | not published |
| DetectifyApplication security platform | automated | Yes | Yes | ? | ? | ? | ? | from EUR 0 per year (annual platform fee) +4 more | Not published | Not stated on the pricing page. | not published |
| DoyensecBoutique consultancy | human-led | Yes | Yes | Yes | ? | Yes | Yes | Custom quote | Not published | Not stated on the homepage or company page. Some public reports are… | Public |
| EquixlyAutonomous testing platform | automated | Yes | Yes | ? | ? | ? | Yes | Custom quote | Not published | Revalidates whenever applications and AI systems change; no separate… | not published |
| EscapeApplication security platform, France | automated | Yes | Yes | ? | Yes | ? | Yes | Custom quote | Continuous AI pentesting: results in minutes on merge, deploy or… | Open issues are re-checked; external network pentesting is followed… | not published |
| Excession LabsPublisher-ownedSecurity lab (AI-assisted testing) | hybrid | Yes | Yes | ? | ? | ? | Yes | Custom quote | Not published | Retest of fixed findings is offered; terms are set in each quote. | Public |
| GiskardAI-assisted testing service, France | hybrid | ? | Yes | ? | ? | ? | Yes | $0 no billing unit given | Not published | Giskard says it re-runs every test until the fix is confirmed. | not published |
| HackerOneCrowdsourced platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Product page gives no start time or test length. HackerOne docs list… | Retesting is included after remediation. Docs say unlimited retests… | not published |
| HadrianAutonomous testing platform, Netherlands | hybrid | Yes | ? | ? | ? | ? | ? | From EUR 1,250 per test, excluding VAT | Most tests finish within 24 to 48 hours; same-day start possible. | Not published | not published |
| Halo SecurityPTaaS platform | hybrid | Yes | Yes | ? | Yes | Yes | ? | Custom quote | Not published | One round of retesting is included; Halo verifies fixes and issues… | not published |
| Horizon3.ai (NodeZero)Autonomous testing platform, United States | automated | Yes | Yes | Yes | Yes | ? | ? | $15 per asset, per test (12-month term) +4 more | Not published as a time. WebApp page says tests can be set up… | Findings include fix actions with one-click verify. On Core, Pro and… | not published |
| Include SecurityApplication security consultancy, United States | human-led | Yes | Yes | ? | ? | Yes | ? | Not published | Report target: a week after the assessment conclusion. | Not published | not published |
| Integrity360Cyber security services provider, Ireland | human-led | Yes | Yes | Yes | Yes | Yes | ? | Custom quote | Not published | Continuous retest options are mentioned. | not published |
| IntruderApplication security platform, United Kingdom | automated | Yes | ? | ? | ? | ? | ? | $3,500 per test +2 more | Setup in minutes; results within hours; the pricing page says… | Unlimited retesting on the single test and the 4-pack. Packs expire… | not published |
| IOActiveSecurity consultancy, United States | human-led | ? | ? | ? | ? | ? | Yes | Not published | Not published | Not published | not published |
| JUMPSECConsultancy, United Kingdom | human-led | ? | ? | ? | ? | ? | Yes | Custom quote | Not published | Not stated. The page recommends testing quarterly or semi-annually… | not published |
| LakeraApplication security platform, United States | hybrid | ? | ? | ? | ? | ? | Yes | Custom quote | Not published | Not published | not published |
| LRQA (Nettitude)Assurance and cyber security provider (Nettitude is now part of LRQA) | human-led | Yes | ? | Yes | Yes | Yes | Yes | Custom quote | Mobile tests: start within two weeks and usually at least three days… | Not published | not published |
| MindgardApplication security platform | hybrid | ? | Yes | ? | ? | ? | Yes | Custom quote | Not published | Teams can retest fixes; Assure re-triggers when the AI system changes. | not published |
| NCC GroupSecurity consultancy, United Kingdom | human-led | ? | ? | Yes | Yes | ? | ? | Not published | Not published | Not published | not published |
| NetSPIPenetration testing as a service (PTaaS) | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Not published | Not published | Not published | not published |
| NoveeAutonomous testing platform | automated | Yes | Yes | ? | ? | Yes | Yes | Custom quote | Not published. Testing is described as continuous. | Retests run automatically after fixes, and on new deployments, code… | not published |
| Outpost24PTaaS platform | hybrid | Yes | Yes | ? | ? | Yes | Yes | Custom quote | Snapshot is 10 days of manual testing and Assure is 3 days. SWAT… | Snapshot and Assure each include a 60-day retest window. SWAT checks… | not published |
| PacketlabsPenetration testing consultancy, Canada | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | The homepage says Packetlabs supports security teams with retesting;… | on request |
| ParameterAI-assisted testing service | automated | Yes | Yes | ? | ? | ? | ? | Custom quote | First findings in 24 hours; most runs finish the same day they start. | Free re-testing is listed for Single App and inherited by higher… | Public |
| PayatuSecurity consultancy, India | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $3,500 per test (starts from) +1 more | Not published | Re-validation of fixes: 1 round (Express, Critical and High), 1… | not published |
| Pen Test PartnersConsultancy | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | PTaaS: scoped within minutes and can start immediately; results in… | Not published | not published |
| PenligentAI-assisted testing service | automated | Yes | ? | ? | Yes | ? | ? | $0 per month +2 more | What takes humans a week, Penligent takes an hour (homepage tagline). | Pro includes task re-runs, scheduled recurring runs and risk… | Public |
| PenteraAutonomous testing platform | hybrid | Yes | Yes | Yes | Yes | ? | ? | Custom quote | Not published | Remediation is followed by re-testing; the FAQ says it revalidates… | not published |
| Pentest PeoplePenetration testing provider (part of WorkNest Secure) | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | not published |
| Pentest-Tools.comVulnerability scanning and pentest platform | hybrid | Yes | Yes | Yes | Yes | ? | Yes | from $96 per month, 16 assets +3 more | Not published | Unlimited rescans on all paid plans (tool scans). | not published |
| PentiAI-assisted testing service | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $20 per month ($216 per year billed annually) +5 more | Pentests done in hours, not months (tagline). On the free first… | Every plan includes free unlimited retests. | not published |
| Prescient SecurityConsultancy | hybrid | Yes | Yes | Yes | Yes | Yes | ? | from $6,000 per engagement (scope-based) +5 more | Not published | Cait: up to 2 retests within 30 days of each scan. No retest terms… | not published |
| RaxisConsultancy, United States | human-led | Yes | Yes | Yes | Yes | ? | Yes | Custom quote | Quote requests answered usually in one business day; PTaaS findings… | Retesting is built into the PTaaS workflow; Raxis Attack includes… | Public |
| Rhino Security LabsPenetration testing firm, United States | human-led | Yes | ? | Yes | Yes | Yes | ? | Not published | Not published | Not published | Public |
| RunSybilAutonomous testing platform | automated | Yes | Yes | Yes | ? | ? | ? | Custom quote | Not published | No retest policy; the platform re-evaluates on every deployment and… | on request |
| SchellmanConsultancy, United States | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | Not stated on the page. | Public |
| Secure IdeasConsultancy | human-led | Yes | Yes | ? | Yes | Yes | ? | $8,160 per test (flat fee, starting) +4 more | Testing usually starts two to four weeks after contracting; one to… | Not included by default; retesting is listed as a factor that can… | Public |
| SecuritumConsultancy, Poland | human-led | Yes | ? | Yes | Yes | Yes | Yes | 640 EUR to 890 EUR per man day +1 more | Not published. Typical engagement length is 1 to 4 weeks for a… | Not published | Public |
| Software SecuredConsultancy, Canada | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Quote within 48 hours; scheduling in 3-6 weeks, sometimes sooner;… | Request retesting within 12 months of report delivery;… | not published |
| SPLXApplication security platform | automated | ? | Yes | ? | ? | ? | Yes | Custom quote | Not published | No retest policy; testing is described as continuous. | not published |
| StingraiPenetration testing consultancy and platform, Canada | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | US$3,000 per assessment +1 more | Autonomous Pentest: same-day results. | Automated retests are listed on the Autonomous plan; the page says… | Public |
| StrixAutonomous testing platform | automated | Yes | Yes | Yes | ? | ? | ? | $29 per seat per month | Not published | The platform retests its own generated fixes; no retest policy or… | not published |
| SynackCrowdsourced platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $5,085 per test (starting price) +2 more | Test windows: 4-5 business days (Sara), 5 days (SynackST), 14 days… | Patch verification is listed as included in each product; the… | not published |
| SySSConsultancy, Germany | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published. A Quick Penetration Test option can start right after… | A retest after fixes confirms the fixes work and checks for new… | not published |
| Terra SecurityAI-assisted testing service | hybrid | Yes | ? | ? | Yes | ? | Yes | Custom quote | Vendor says tests drop from 4-6 weeks to 2-4 hours versus… | Not published | not published |
| TrustedSecSecurity consultancy, United States | human-led | ? | ? | Yes | ? | ? | Yes | Not published | Not published | Not published | not published |
| TurboPentestAI-assisted testing service | automated | Yes | Yes | ? | Yes | ? | Yes | $99 per credit (one pentest) +4 more | All tiers typically complete in a few hours. | A retest is a full new pentest at the same per-target price; no… | Public |
| usd AGConsultancy, Germany | human-led | ? | ? | Yes | ? | Yes | Yes | Custom quote | Not published | Not published | not published |
| VumetricPenetration testing consultancy, Canada | human-led | Yes | Yes | Yes | Yes | Yes | ? | Custom quote | Most penetration tests can be performed within a couple of days, but… | Not stated | on request |
| XBOWAutonomous testing platform | automated | Yes | Yes | ? | ? | ? | ? | Custom quote | First validated findings arrive in hours; testing is continuous or… | Retests after a fix are described as free and unlimited. | not published |
| ZeroThreatAutonomous testing platform | automated | Yes | Yes | ? | ? | ? | ? | $100 per target per month +2 more | Not published | Professional: unlimited retesting. Pay Per Scan: unlimited retesting… | not published |
No provider matches every filter. Remove a filter to see more.
"?" means the provider does not say on its public pages. It does not mean "no". Prices use each provider's own unit: a test, a year, a month or credits. Do not compare them as equal units. How we collect and check this data.
What to check before price#
Delivery#
Who does the testing?. Human-led means named testers do the work, with tools. Automated means software runs the test. Hybrid mixes both: for example an AI agent with human review, or a platform with a pentester. The difference shows up most in business logic and access control.
Scope#
Does it test what you have?. Check each surface you need: web app, API, cloud, network, mobile or AI features. A provider that tests networks well may not test multi-tenant SaaS authorization at all.
Price units#
What does the price buy?. One test, a year of scans, a number of credits or a monthly subscription. Check what is included: retest, report letter, readout call. Cost guide
How do you shortlist penetration testing companies by need?#
Start from what you need tested, then narrow by delivery and price unit. We rank no one. See the shortlist guide for penetration testing companies, which groups providers by need from the same dataset.
- Startup or first test: pentest providers for startups
- SOC 2 evidence: providers for SOC 2 evidence
- AI features or LLM apps: AI red teaming providers
- Platform with human testers: HackerOne vs Bugcrowd, Cobalt alternatives
- Installed testing platforms: Pentera alternatives, NodeZero vs Pentera
- Published per-test prices: Intruder alternatives, Astra Security alternatives
Which penetration testing companies publish prices, and in what unit?#
Most providers sell by quote. Where a price exists, the unit changes what it means: per test, per assessment, per asset, per month, per year or per credit. A $3,500 test and a credit package are different purchases. The pricing hub lists each vendor's published figures with units and check dates. Single-vendor pages include Cobalt, Synack and Detectify. The cost guide explains the models.
Send every provider the same scope#
Quotes only compare when the scope matches. The scoping checklist collects what providers ask for: hosts, roles, API size, environments, deadlines and report needs. It produces a summary you can paste into each request. Nothing leaves your browser.
Who publishes this, and how to use the data#
Excession Labs publishes PentestCompare and also sells penetration testing. Our row in the main table is labeled "Publisher-owned" and follows the same rules as every other row: it is not placed first, and our unknowns say "not published". We leave it out of every filtered list, comparison and shortlist on this site. If you want to talk to us about your own test, use the clearly labeled Excession Labs contact form. It does not go to the other providers.
The full table is available as JSON and CSV under the MIT licence, with sources and check dates for every field. Found something wrong or out of date? Send a correction.
Read how we compare, the head-to-head comparisons and the glossary.
Questions
Who publishes PentestCompare?
Excession Labs, which also sells penetration testing. The footer of every page names Excession Labs as the owner. In the main table its row is labeled 'Publisher-owned', and it is left out of every filtered list, comparison and shortlist. The table is sorted alphabetically, not ranked. The methodology page explains the method.
Why do some cells show a question mark?
A question mark means the provider does not say on its public pages. It does not mean no. We do not guess or estimate missing values. If you know a published source, send a correction.
Can I compare the prices directly?
Only with care. Providers price per test, per year, per month or with credits, and an automated scan is a different product from a manual engagement. Read the unit and what the price covers in each profile. The cost guide explains the pricing models.
How often is the data checked?
Each profile shows the date we last checked the provider's own pages, and every fact links to its source. We recheck when a provider asks for a correction and when we update the guides.
Do providers pay to be listed?
No. Providers do not pay for listings, placement or clicks, and we do not use affiliate links.
Prepare before you talk to providers
Use the scoping checklist to collect what every provider asks for. You get quotes you can compare.