# Pentest sample reports: public examples from providers

Source: https://pentestcompare.com/lists/pentest-companies-with-sample-reports/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Penetration testing sample report links from providers that publish one, with the check date, what to read in each report, and who sends one on request instead.

> **Short answer:** These providers publish a sample penetration testing report or public client reports on their own sites, A to Z, with each link checked on 9 November 2026. Some provide a report on request instead. Open the report and check scope, method, evidence for each finding, remediation and retest before you shortlist a provider.

A penetration testing sample report is the best free evidence of what you will receive. The table lists providers whose own pages link a public sample report or public client reports, A to Z with no ranking. We checked each link on 9 November 2026. Names link to the provider pages with sources.

| Provider | Type | Delivery | Web | API | Cloud | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|
| [7ASecurity](https://pentestcompare.com/providers/7asecurity/) | Boutique consultancy | human-led | yes | unknown | yes | yes | custom quote | Not published | Free fix verification: 'verify your fixes, suggest improvements and ensure bypasses are not possible for free', during or after the test. | public |
| [Aikido](https://pentestcompare.com/providers/aikido/) | Application security platform | automated | yes | yes | unknown | yes | $4,000 per assessment | TYPICAL Pentest: same-day results. The AI pentest page also says a few hours, minutes, and in one place a report in days. | Free retesting for up to 6 months, including checks for bypasses of fixes. | public |
| [Bugcrowd](https://pentestcompare.com/providers/bugcrowd/) | PTaaS platform | hybrid | yes | yes | yes | yes | custom quote | Tests launch in under 72 hours; Standard: launch within 3 business days. | Standard: one year of retesting with one report revision, for web apps, networks and APIs only. Plus: same terms for every asset type. Max: same as Plus. | public |
| [Cure53](https://pentestcompare.com/providers/cure53/) | Boutique consultancy | human-led | yes | unknown | yes | unknown | custom quote | Not published | Not published. The site says assignments do not end with the report and that critical bugs are usually fixed by report time. | public |
| [Doyensec](https://pentestcompare.com/providers/doyensec/) | Boutique consultancy | human-led | yes | yes | yes | yes | custom quote | Not published | Not stated on the homepage or company page. Some public reports are titled 'With Retesting' or 'After Retest'. | public |
| [Excession Labs](https://pentestcompare.com/providers/excession-labs/) | Security lab (AI-assisted testing) | hybrid | yes | yes | unknown | yes | custom quote | Not published | Retest of fixed findings is offered; terms are set in each quote. | public |
| [Parameter](https://pentestcompare.com/providers/parameter/) | AI-assisted testing service | automated | yes | yes | unknown | unknown | custom quote | First findings in 24 hours; most runs finish the same day they start. | Free re-testing is listed for Single App and inherited by higher tiers. | public |
| [Penligent](https://pentestcompare.com/providers/penligent/) | AI-assisted testing service | automated | yes | unknown | unknown | unknown | $0 per month | What takes humans a week, Penligent takes an hour (homepage tagline). | Pro includes task re-runs, scheduled recurring runs and risk re-scans to verify fixes. Limits and credit use are not stated. | public |
| [Raxis](https://pentestcompare.com/providers/raxis/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Quote requests answered usually in one business day; PTaaS findings appear in real time. | Retesting is built into the PTaaS workflow; Raxis Attack includes year-round retesting of fixes. | public |
| [Rhino Security Labs](https://pentestcompare.com/providers/rhino-security-labs/) | Penetration testing firm | human-led | yes | unknown | yes | unknown | not published | Not published | Not published | public |
| [Schellman](https://pentestcompare.com/providers/schellman/) | Consultancy | human-led | yes | yes | yes | yes | custom quote | Not published | Not stated on the page. | public |
| [Secure Ideas](https://pentestcompare.com/providers/secure-ideas/) | Consultancy | human-led | yes | yes | unknown | unknown | $8,160 per test (flat fee, starting) | Testing usually starts two to four weeks after contracting; one to two weeks of testing. | Not included by default; retesting is listed as a factor that can change the quote. | public |
| [Securitum](https://pentestcompare.com/providers/securitum/) | Consultancy | human-led | yes | unknown | yes | yes | 640 EUR to 890 EUR per man day | Not published. Typical engagement length is 1 to 4 weeks for a single application or area. | Not published | public |
| [Stingrai](https://pentestcompare.com/providers/stingrai/) | Penetration testing consultancy and platform | hybrid | yes | yes | yes | yes | US$3,000 per assessment | Autonomous Pentest: same-day results. | Automated retests are listed on the Autonomous plan; the page says retests are included in the fixed plans. No window is stated. | public |
| [TurboPentest](https://pentestcompare.com/providers/turbopentest/) | AI-assisted testing service | automated | yes | yes | unknown | yes | $99 per credit (one pentest) | All tiers typically complete in a few hours. | A retest is a full new pentest at the same per-target price; no separate retest SKU. A free re-pentest applies if zero actionable findings (once per domain). | public |

## What does this list include, and how does a provider qualify?

A provider qualifies when its own site links a report that anyone can open without a sales call. The link can go to a PDF, a form-free download, or a page of public reports. We do not list "on request" providers in the table, because you cannot check what they send. Our dataset marks them separately. For how to read a report once you have it, see [how to judge a pentest provider by its sample report](/guides/judge-a-pentest-provider-by-its-sample-report/). This page answers who publishes one.

## Who does it help?

It helps buyers who want to compare report quality before any call, and engineering teams that need to know what their auditor or customer will read. It also helps first-time buyers who have never seen a pentest report. Open two or three samples side by side.

## What should you read in each sample?

Use this checklist on every report you open.

| Check | What to look for |
|---|---|
| Scope | Named assets, dates, test accounts and exclusions |
| Method | Manual steps named, tools named, standards cited |
| Evidence | Request and response, screenshot or log for each finding |
| Reproduction | Steps a developer can follow |
| Severity | A written scale and a reason for each rating |
| Remediation | A specific fix, not "validate input" |
| Retest | A section or letter that shows a fix was checked |

## What drives the price?

Price follows scope, depth, roles and tenants, and retest terms. A longer report is not a better one. Compare the Published price column with the report depth, and see [penetration testing cost](/guides/penetration-testing-cost/) for sourced ranges.

## How do you read the table?

The Sample report column says "public" for every row, so use the provider page for the link and the check date. A "public" status can mean one sample PDF, a research page with many client reports, or a product page with a downloadable example. Open the link and see which. The other columns describe the provider as a whole.

## What are the limits of this list?

We confirm that a link works and is on the provider's own site. We do not confirm that a sample matches the report you will get. A sample can be redacted or invented, and it can be old. Some providers share a report only on request. Compass Security, Packetlabs and Vumetric list a request route, and Bridewell offers a redacted report on request. Ask any provider for a sample report from the same service you plan to buy, such as an API test or a cloud test. Also see [boutique penetration testing firms](/lists/boutique-penetration-testing-firms/).

## Questions

### Is a public sample report a real client report?

Not always. Some providers publish a redacted or invented example. Others publish real reports with client consent. Check the provider page and the report cover. A sample shows format and depth, not the result for your system.

### What if a provider only sends a report on request?

Ask for it before the scoping call. Compass Security, Packetlabs and Vumetric list a request route, and Bridewell offers a redacted report on request. A provider that refuses to show any sample leaves you judging by the pitch alone.

### Can I use a sample report as a template for my own?

You can learn the structure from one. Do not copy a provider's text. Write your own scope, severity scale and remediation rules, or ask the provider for its template.

### How do I judge a sample report?

Read the finding pages first, not the summary. Check for the request and response, the steps to reproduce, the fix and the severity reason. Our guide on judging a provider by its sample report has the full checklist.

## Sources

- [7ASecurity publications](https://7asecurity.com/publications)
- [Parameter sample pentest report](https://www.parameter.ai/parameter-assets/sample-pentest-report.pdf)
- [Raxis sample report](https://raxis.com/sample-report/)
- [Secure Ideas sample report](https://secureideas.com/sample-report)
- [Securitum public reports](https://securitum.com/public-reports.html)
- [Compass Security sample report request](https://www.compass-security.com/en/contact/sample-report)
- [PentestCompare methodology](https://pentestcompare.com/methodology/)