Pentest provider comparisons

Each comparison uses the same fields from the provider dataset: delivery, scope, pricing model with units, what the turnaround claim measures, retest terms, sample report and credentials with evidence. Where a vendor publishes nothing, the cell says "Not published". We give no ratings and name no winners. Excession Labs, the publisher of this site, is one row in the dataset and is marked wherever it appears.

Alternatives#

• Cobalt alternatives: six options grouped by published price, human-led retest terms and automated tests.
• XBOW alternatives: options for a published price, a sample report, a human reviewer or network coverage.
• HackerOne pentest alternatives: options with published prices, set retest counts or consultancy delivery.

Head-to-head#

• Cobalt vs HackerOne: two platforms with human testers, one published price, different retest wording.
• XBOW vs Horizon3 NodeZero: different categories, web and API agents against a network-first platform.
• Synack vs Cobalt: per-test starting prices against credit packages.

For method and field definitions, see the methodology. To send a correction, use the corrections form.