Intruder vs Detectify: pentest or scanner pricing compared
Intruder lists an AI web app pentest at $3,500 per test, a four-test pack at $12,000 and a conflicting $4,000 on its product page. Detectify lists annual scanning fees: Starter from EUR 0, Standard from EUR 2,500, Professional from EUR 5,000 and Enterprise from EUR 15,000, with PCI ASV scanning at EUR 500 per year. The units differ, so the prices are not equal. Checked 9 November 2026.
Intruder vs Detectify is a comparison of two different price units. Intruder lists a price per AI web app pentest. Detectify lists an annual platform fee for automated scanning. Intruder also sells vulnerability scanning, so the two overlap there. This page uses vendor pages read on 9 November 2026, through the provider dataset, and names no winner.
What is each product in one line?#
Intruder's AI Pentesting is a white-box web app test run by autonomous agents. Detectify is an automated scanner for web and API surfaces. They answer different questions: one produces a test result for a scope, the other watches domains over time.
Intruder's agents work from your source code and check each finding against the live app. The page says a human in the loop is not needed for web app pentesting. Detectify's pricing page lists automated surface monitoring and application scanning, and lists no human-led pentest.
How do they compare side by side?#
| Field | Intruder | Detectify |
|---|---|---|
| Type (dataset) | Application security platform | Application security platform |
| Delivery | Automated: AI agents, plus separate scanning products | Automated: surface monitoring and scanning |
| Scope named | Web app (API, cloud, network, mobile not stated for the AI test) | Web app and API (cloud, network, mobile not stated) |
| Pricing model | Published | Published |
| Price unit | Per test; per pack of 4 tests | Per year (annual platform fee) |
| Retesting | Unlimited on the single test and the 4-pack; packs expire after 1 year | Not stated on the pricing page |
| Turnaround | Setup in minutes; results within hours; no lead times (vendor claim) | Not published |
| Sample report | Not published | Not published |
| HQ country | United Kingdom | Not published |
Sources: Intruder pentest pricing, Intruder AI Pentesting and Detectify pricing.
How are the prices compared by unit?#
Intruder prices a test and Detectify prices a year of access. Neither unit converts to the other without assumptions about your scope.
| Provider | Item | Price | Unit |
|---|---|---|---|
| Intruder | Single pentest | $3,500 | per test |
| Intruder | 4 pentest pack | $12,000 | per pack of 4 tests (about $3,000 each), use within 1 year |
| Intruder | AI Pentesting (product page) | $4,000 | per test, standalone purchase |
| Detectify | Starter | from EUR 0 | per year |
| Detectify | Standard | from EUR 2,500 | per year |
| Detectify | Professional | from EUR 5,000 | per year |
| Detectify | Enterprise | from EUR 15,000 | per year |
| Detectify | PCI ASV Scanning | EUR 500 | per year, add-on on all tiers |
Intruder's two pages disagree. The AI Pentesting page says tests start from $3,500 for existing customers and $4,000 as a standalone purchase, and the pentest pricing page shows $3,500 for both. The final price depends on app size and complexity, and prices exclude VAT. Ask which page applies to you.
Detectify's page is also inconsistent in one place: the Starter card says API scanning is included, and the comparison table lists it at extra cost per target. Added domains, environments and IP ranges cost extra, with no figures. Non-profits get 30% off.
A rough way to compare: if you run one test a year, Intruder's $3,500 (or $4,000) buys a single report. If you want continuous scanning of several domains, Detectify's yearly fee buys access. The first is a test, the second a subscription. Read pentest vs vulnerability scan before you put the two on one budget line.
Who tests, and how is the work delivered?#
Both products are automated. Intruder's AI test uses repository integration with GitHub, GitLab, Azure DevOps or Bitbucket Cloud, so you share source code with it. Detectify's pricing page lists no source-code integration.
Neither page describes human review of findings. If you need a person to test business logic and access control, an automated product alone does not give you that. The AI vs human pentesting guide explains the gap.
How do scope and fit differ?#
Intruder's AI test covers web applications. Its pages do not state API, cloud, network or mobile scope for it. Detectify lists web and API scanning, with internal scanning from the Professional tier (one environment) and three internal scanning agents on Enterprise.
The dataset summarizes the fit this way. Intruder suits teams that can share source code and want a published per-test price with unlimited retests. Detectify suits teams that want continuous automated web and API scanning with annual fees they can read before a call.
Where is each stronger, according to the sources?#
On the vendor pages, Intruder is stronger on a defined retest term and a published per-test price with a pack discount (about $3,000 per test in the four-pack). Detectify is stronger on published scale-up tiers (users, teams, SSO, SLA, onboarding hours) and a published PCI ASV scanning price of EUR 500 per year.
Both have limits. Intruder's tradeoffs are web apps only for the AI pentest, no sample report and an auditor refund promise that we did not test. Detectify's are automated scanning only, unpublished add-on costs and no sample report.
What does neither publish?#
| Item | Intruder | Detectify |
|---|---|---|
| Sample report | Not published | Not published |
| Time to report for complex apps | Not stated | Not published |
| Human review of findings | Not described | Not described |
| Retest terms | Stated | Not stated |
| Per-domain or per-target add-on price | Not applicable to the AI test | Not published |
| Platform plan prices (Cloud, Pro) | No price in the page text we could read | Tier fees published |
How do you decide?#
Choose by the question you need answered.
- You need one test of a web app before a release, with source access available: price Intruder's test and ask for the retest terms in writing.
- You need continuous coverage of many domains and APIs: price Detectify at the tier that lists your required users and internal scanning, then ask for the add-on prices.
- You need a pentest report for a customer or auditor: neither publishes a sample report. Ask what the deliverable contains, and ask your auditor what they accept.
- You need a human tester: look at the providers in Intruder alternatives.
See the Intruder and Detectify pricing pages for their full notes. Send a correction if a vendor page now differs.
Questions
Is Intruder or Detectify cheaper?
They bill different things. Intruder lists $3,500 per AI web app pentest, or $12,000 for four. Detectify lists annual platform fees from EUR 0 to EUR 15,000 for scanning. A per-test fee and a yearly fee are not the same unit, so compare them against your scope and number of tests per year.
Is either one a human-led pentest?
No. The Intruder AI Pentesting page describes autonomous agents and says a human in the loop is not needed for web app pentesting. Detectify lists automated surface monitoring and application scanning, and no human-led pentest on its pricing page.
Do Intruder and Detectify include retesting?
Intruder lists unlimited retesting on the single test and the four-test pack. Detectify's pricing page does not state retest terms, so ask whether a re-scan after a fix is included.
Sources
- Intruder pentest pricing (checked 9 November 2026)
- Intruder AI Pentesting (checked 9 November 2026)
- Intruder pricing (checked 9 November 2026)
- Detectify pricing (checked 9 November 2026)
- Detectify contact (checked 9 November 2026)