# Pentest companies with published prices: Nov 2026 list

Source: https://pentestcompare.com/lists/pentest-companies-with-published-prices/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Pentest companies that publish a price, A to Z, with the price, its unit and the source page for each, checked 9 November 2026. Most firms still quote on request.

> **Short answer:** These pentest companies print a dollar or euro price on their own pages, checked on 9 November 2026. Units differ: a test, an asset, a credit, a day, a month or a year. A published price is a start point for the smallest scope, not a quote for your system. Most firms still quote on request.

Buyers who search for penetration testing pricing want a number before they talk to sales. This page lists the companies that print one. A provider qualifies when its own pricing page or product page shows a dollar or euro amount for a pentest or a pentest product. Rows run A to Z, no provider pays for position, and each price links to its source with the date we checked it.

| Provider | Type | Delivery | Web | API | Cloud | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|
| [Aikido](https://pentestcompare.com/providers/aikido/) | Application security platform | automated | yes | yes | unknown | yes | $4,000 per assessment | TYPICAL Pentest: same-day results. The AI pentest page also says a few hours, minutes, and in one place a report in days. | Free retesting for up to 6 months, including checks for bypasses of fixes. | public |
| [Astra Security](https://pentestcompare.com/providers/astra-security/) | PTaaS platform | hybrid | yes | yes | yes | yes | $2,999 per year (card also shows $199 per month) | Manual pentest: 10-15 working days. Pentest Auto: first report the same day. | Re-scans included: Auto 1, Expert 2, Enterprise 4; window 30 days (Auto, Expert) or 90 days (Enterprise). The page FAQ says 2 re-scans for PTaaS plans. | not published |
| [Cobalt](https://pentestcompare.com/providers/cobalt/) | PTaaS platform | hybrid | yes | yes | yes | yes | $3,500 per test | Autonomous Pentest: findings in 24 hours. Annual tiers: start within 3 / 2 / 1 business days (Standard / Premium / Enterprise); footnote says start times vary by engagement type. | Comparison table: free retesting for 6 months (Standard) or 12 months (Premium, Enterprise). FAQ says unlimited on-demand retesting during the contract term. The two statements differ. | on request |
| [CYBRI](https://pentestcompare.com/providers/cybri/) | Penetration testing consultancy | human-led | yes | yes | yes | yes | $5,000 starts at, per engagement | From 5 business days (Web Application and Custom), 10 (Web, API, Cloud or AI), 15 (Multiple Apps). | Remediation testing is included in the $9,500 and $20,000 tiers. Unlimited remediation testing with an extended window is listed as an add-on. The Web Application tier does not state it. | not published |
| [Detectify](https://pentestcompare.com/providers/detectify/) | Application security platform | automated | yes | yes | unknown | unknown | from EUR 0 per year (annual platform fee) | Not published | Not stated on the pricing page. | not published |
| [Giskard](https://pentestcompare.com/providers/giskard/) | AI-assisted testing service | hybrid | unknown | yes | unknown | yes | $0 no billing unit given | Not published | Giskard says it re-runs every test until the fix is confirmed. | not published |
| [Hadrian](https://pentestcompare.com/providers/hadrian/) | Autonomous testing platform | hybrid | yes | unknown | unknown | unknown | From EUR 1,250 per test, excluding VAT | Most tests finish within 24 to 48 hours; same-day start possible. | Not published | not published |
| [Horizon3.ai (NodeZero)](https://pentestcompare.com/providers/horizon3/) | Autonomous testing platform | automated | yes | yes | yes | unknown | $15 per asset, per test (12-month term) | Not published as a time. WebApp page says tests can be set up quickly and run as often as needed. | Findings include fix actions with one-click verify. On Core, Pro and Elite retests carry no extra charge because testing is unlimited; for Flex the page does not say whether a verify counts as a new billed test. | not published |
| [Intruder](https://pentestcompare.com/providers/intruder/) | Application security platform | automated | yes | unknown | unknown | unknown | $3,500 per test | Setup in minutes; results within hours; the pricing page says reports are delivered the same day with no lead times. | Unlimited retesting on the single test and the 4-pack. Packs expire after 1 year. | not published |
| [Payatu](https://pentestcompare.com/providers/payatu/) | Security consultancy | hybrid | yes | yes | yes | yes | $3,500 per test (starts from) | Not published | Re-validation of fixes: 1 round (Express, Critical and High), 1 round (Expert, all severities), 2 rounds (Enterprise, all severities). | not published |
| [Penligent](https://pentestcompare.com/providers/penligent/) | AI-assisted testing service | automated | yes | unknown | unknown | unknown | $0 per month | What takes humans a week, Penligent takes an hour (homepage tagline). | Pro includes task re-runs, scheduled recurring runs and risk re-scans to verify fixes. Limits and credit use are not stated. | public |
| [Pentest-Tools.com](https://pentestcompare.com/providers/pentest-tools/) | Vulnerability scanning and pentest platform | hybrid | yes | yes | yes | yes | from $96 per month, 16 assets | Not published | Unlimited rescans on all paid plans (tool scans). | not published |
| [Penti](https://pentestcompare.com/providers/penti/) | AI-assisted testing service | hybrid | yes | yes | yes | yes | $20 per month ($216 per year billed annually) | Pentests done in hours, not months (tagline). On the free first test, agents start within an hour. No per-plan turnaround is stated. | Every plan includes free unlimited retests. | not published |
| [Prescient Security](https://pentestcompare.com/providers/prescient-security/) | Consultancy | hybrid | yes | yes | yes | unknown | from $6,000 per engagement (scope-based) | Not published | Cait: up to 2 retests within 30 days of each scan. No retest terms stated for Traditional and Compliance pentests. | not published |
| [Secure Ideas](https://pentestcompare.com/providers/secure-ideas/) | Consultancy | human-led | yes | yes | unknown | unknown | $8,160 per test (flat fee, starting) | Testing usually starts two to four weeks after contracting; one to two weeks of testing. | Not included by default; retesting is listed as a factor that can change the quote. | public |
| [Securitum](https://pentestcompare.com/providers/securitum/) | Consultancy | human-led | yes | unknown | yes | yes | 640 EUR to 890 EUR per man day | Not published. Typical engagement length is 1 to 4 weeks for a single application or area. | Not published | public |
| [Stingrai](https://pentestcompare.com/providers/stingrai/) | Penetration testing consultancy and platform | hybrid | yes | yes | yes | yes | US$3,000 per assessment | Autonomous Pentest: same-day results. | Automated retests are listed on the Autonomous plan; the page says retests are included in the fixed plans. No window is stated. | public |
| [Strix](https://pentestcompare.com/providers/strix/) | Autonomous testing platform | automated | yes | yes | yes | unknown | $29 per seat per month | Not published | The platform retests its own generated fixes; no retest policy or cost is stated on the pricing page. | not published |
| [Synack](https://pentestcompare.com/providers/synack/) | Crowdsourced platform | hybrid | yes | yes | yes | yes | $5,085 per test (starting price) | Test windows: 4-5 business days (Sara), 5 days (SynackST), 14 days (Synack14). | Patch verification is listed as included in each product; the platform subscription lets you request patch verifications and retests. | not published |
| [TurboPentest](https://pentestcompare.com/providers/turbopentest/) | AI-assisted testing service | automated | yes | yes | unknown | yes | $99 per credit (one pentest) | All tiers typically complete in a few hours. | A retest is a full new pentest at the same per-target price; no separate retest SKU. A free re-pentest applies if zero actionable findings (once per domain). | public |
| [ZeroThreat](https://pentestcompare.com/providers/zerothreat/) | Autonomous testing platform | automated | yes | yes | partial | unknown | $100 per target per month | Not published | Professional: unlimited retesting. Pay Per Scan: unlimited retesting within 7 days. Free: not included. | not published |

## Which pentest prices do providers publish?

This extract picks one clear entry price for some providers from the full table above, so you can see the range and the units side by side. All prices were read on 9 November 2026.

| Provider | Published price | Unit | Source |
|---|---|---|---|
| [Aikido](/providers/aikido/) | $4,000 (typical) | per assessment, one app plus primary APIs, whitebox | [pricing](https://www.aikido.dev/pricing) |
| [Astra Security](/providers/astra-security/) | $2,999 (Pentest Auto) | per year | [pricing](https://www.getastra.com/pricing) |
| [Cobalt](/providers/cobalt/) | $3,500 (Autonomous Pentest, limited-time offer) | per test | [pricing](https://www.cobalt.io/pricing) |
| [CYBRI](/providers/cybri/) | from $5,000 (Web Application) | per engagement | [pricing](https://cybri.com/pricing/) |
| [Hadrian](/providers/hadrian/) | from EUR 1,250 (Nova test), excluding VAT | per test | [pricing](https://hadrian.io/pricing) |
| [Intruder](/providers/intruder/) | $3,500 | per test | [pricing](https://www.intruder.io/pentest-pricing) |
| [Payatu](/providers/payatu/) | from $3,500 (AI-Native Express) | per test | [pricing](https://payatu.com/pricing) |
| [Prescient Security](/providers/prescient-security/) | from $3,000 (Compliance Pentest) | per engagement, scope-based | [pricing](https://prescientsecurity.com/penetration-testing-services/cacilian/pricing) |
| [Secure Ideas](/providers/secure-ideas/) | from $13,600 (smallest web application test) | flat fee, starting | [pricing](https://secureideas.com/pricing) |
| [Securitum](/providers/securitum/) | 3,500 EUR to 14,000 EUR (typical total) | per engagement | [pricing](https://securitum.com/pricing.html) |
| [Stingrai](/providers/stingrai/) | US$3,000 (Autonomous Pentest) | per assessment | [pricing](https://www.stingrai.io/pricing) |
| [Synack](/providers/synack/) | from $5,085 (Sara Pentest) | per test | [pricing](https://www.synack.com/pricing/) |
| [TurboPentest](/providers/turbopentest/) | $99 (Audit-Ready) | per credit, one pentest | [pricing](https://turbopentest.com/pricing) |

The units differ, and so do the products. Some are automated tests of one target. Some are manual tests by people. The cheapest entry point is not the cheapest test of your system.

## What does the list include, and how does a provider qualify?

A provider qualifies when we recorded at least one price from its own page. We do not count a price from a review site, a reseller or an article. Free plans and tool subscriptions count when the provider sells them as part of its pentest range, and we show their unit.

Providers that print no amount are not on the list. Many firms say price depends on scope and quote after a call. That is a statement about their sales model and not about their quality.

## Who does this list help?

It helps buyers who need a budget range before they start a procurement, and buyers who want to filter out firms that give no figure. It also helps teams that need to compare an automated product with a manual engagement. Both exist under the same word.

For an explanation of price models, drivers and what a quote should contain, read the [penetration testing cost guide](/guides/penetration-testing-cost/). This page answers a narrower question: who prints a number, and what is it.

## What should you ask providers?

Ask for written answers to these questions, even when a price is public.

1. Which scope does the published price assume (number of apps, roles, API endpoints)?
2. Is depth black box, grey box or white box?
3. Does the price include a retest, and for how long?
4. Does a human review every finding?
5. Is the price a limited-time offer, and when does it end?
6. What extra items change the total (extra roles, environments, report formats)?

## What drives the price?

The entries show the main drivers. Scope is the first. Aikido states that its typical $4,000 covers one application plus its primary APIs, and that black-box and grey-box tests cost extra ([Aikido](https://www.aikido.dev/pricing)). Delivery model is the second. TurboPentest sells automated pentests from $99 per credit, while Secure Ideas starts at $13,600 for its smallest web application test with people ([TurboPentest](https://turbopentest.com/pricing), [Secure Ideas](https://secureideas.com/pricing)). Retest terms are the third. Intruder states unlimited retesting on its single test and 4-pack, ([Intruder](https://www.intruder.io/pentest-pricing)). TurboPentest treats a retest as a full new pentest at the same per-target price ([TurboPentest](https://turbopentest.com/pricing)).

## How do you read the table?

Rows run A to Z. The Published price column shows the provider's own unit, such as a test, a year, a month or a credit. Do not read it as one unit. The Retest and Sample report columns help you judge value beyond the price, because a cheap test without a usable report costs more to act on.

## What are the limits of this list?

- A published price is a start price for a smallest scope. Your scope may cost more.
- Prices change without notice. Some are limited-time offers, like Cobalt's Autonomous Pentest price. Open the source link before you budget.
- The list shows who publishes, not who is best. Firms that quote on request are missing by design.
- A price on a page does not include tax, unless the page says so. Hadrian's price excludes VAT.

To report a price that changed, use the [correction form](/contact/).

## Questions

### Why do most pentest companies not publish prices?

Providers say scope sets the price, so they quote after a call. Cost depends on the number of apps, roles, API endpoints and depth. A list price can mislead if your scope is larger than the smallest one. Ask for a written quote on your scope.

### Can I compare the prices in the table directly?

No. Units differ: a test, an asset per year, a credit, a day or a monthly plan. A price for a scan of one asset is not a price for a manual test of an app with three roles. Compare only quotes for the same written scope.

### Does a published price include retesting?

Sometimes. Intruder states unlimited retesting on its single test and 4-pack. Aikido states free retests for up to 6 months. TurboPentest treats a retest as a full new pentest at the same per-target price. Read the retest line for each provider before you compare.

### How current are the prices?

Each price was read on the provider's own page on 9 November 2026. Prices change without notice, and some are limited-time offers. Open the source link before you rely on a number, and tell us if a price is out of date.

## Sources

- [Aikido: pricing](https://www.aikido.dev/pricing)
- [Astra Security: pricing](https://www.getastra.com/pricing)
- [Cobalt: pricing](https://www.cobalt.io/pricing)
- [CYBRI: pricing](https://cybri.com/pricing/)
- [Hadrian: pricing](https://hadrian.io/pricing)
- [Intruder: pentest pricing](https://www.intruder.io/pentest-pricing)
- [Payatu: pricing](https://payatu.com/pricing)
- [Prescient Security: pentest pricing](https://prescientsecurity.com/penetration-testing-services/cacilian/pricing)
- [Secure Ideas: pricing](https://secureideas.com/pricing)
- [Securitum: pricing](https://securitum.com/pricing.html)
- [Stingrai: pricing](https://www.stingrai.io/pricing)
- [Synack: pricing](https://www.synack.com/pricing/)
- [TurboPentest: pricing](https://turbopentest.com/pricing)