# Astra pentest pricing: plans, per-year units and re-scans

Source: https://pentestcompare.com/pricing/astra-security/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Astra pentest pricing as listed on 9 November 2026: Auto $2,999, Expert $5,999 and Enterprise from $9,999 per year, per target, with re-scans and conflicts.

> **Short answer:** Astra Security lists pentest plans per target, per year: Pentest Auto $2,999, Pentest Expert $5,999 and Pentest Enterprise from $9,999. Auto includes 1 re-scan, Expert 2 and Enterprise 4. A manual pentest takes 10 to 15 working days. Astra's own pricing page shows conflicting figures in places, so confirm the plan, target count and re-scan terms in your quote.

Astra pentest pricing is published, and the unit is per target, per year. As of 9 November 2026, Astra Security lists three pentest plans with dollar prices. Its pricing page also contains figures that disagree with each other, noted below.

## What does Astra Security publish about price?

Astra lists four items with prices. All come from the [Astra pricing page](https://www.getastra.com/pricing), checked on 9 November 2026.

| Plan | Price | Unit | What it covers |
|---|---|---|---|
| Pentest Auto | $2,999 (card also shows $199 per month) | per year | 1 target, web apps and SaaS only; role-based graybox test, PTaaS dashboard, 1 human re-scan |
| Pentest Expert | $5,999 | per year | Auto plus a manual pentest by certified experts; web, mobile, cloud, network, AI and MCP targets; 2 re-scans; compliance-ready reports |
| Pentest Enterprise | From $9,999 | per year | Expert plus private cloud or on-prem deployment, continuous autonomous pentesting, API scanner for 100 endpoints, custom SLA |
| Scanner Lite | $69 monthly / $699 annual | per target | 1 target, 3 scans per month (DAST) |

Other DAST, API and cloud plans exist on Astra's site and are not listed here. The [Astra profile](/providers/astra-security/) has the full record.

## What is the price unit, and what does it buy?

The unit is one target for one year. One web or SaaS app is 1 target. Mobile is priced per platform, and shared-codebase mobile apps start at $2,200 per app.

That makes the target count the main driver of your bill. Two products, or an app and its staging copy, may count as separate targets. Ask Astra how it counts your assets before you multiply the price.

> **Worked example with fictional apps:** This is a demonstration of the arithmetic. No real company or quote is shown. Harbor Notes, a fictional note-taking company, runs one web app and one customer portal. Suppose Astra counts each as 1 target. Two Pentest Auto targets would be 2 x $2,999 = $5,998 for a year. Two Pentest Expert targets would be 2 x $5,999 = $11,998 for a year. The real total depends on Astra's own count, so treat these as an upper check on a quote, not as a price.
Pentest Auto is an autonomous AI-agent test. Pentest Expert and Enterprise add a manual pentest by certified experts, so the price steps up when a human tester joins. The page for Auto limits it to web apps and SaaS.

## What costs extra, and where does the page conflict?

Astra's own pricing page shows conflicting figures in places. One example in our record is $999 per year for Scanner, which does not match the $69 monthly or $699 annual Scanner Lite figures. The Auto card shows $2,999 per year and also $199 per month. $199 times 12 is $2,388, so a monthly bill might not equal the annual price. Ask which one applies to you.

Other things the page does not settle:

- The page claims CREST, PCI-ASV and CERT-IN compliant reports but gives no accreditation link. We list no credential for Astra.
- Larger scope, extra targets and mobile platforms cost more, but the page gives no formula.
- No sample report is published.

## What do re-scans and turnaround look like?

Astra includes a set number of re-scans per plan, each inside a window.

| Plan | Re-scans included | Window |
|---|---|---|
| Pentest Auto | 1 | 30 days |
| Pentest Expert | 2 | 30 days |
| Pentest Enterprise | 4 | 90 days |

The page FAQ says 2 re-scans for its PTaaS plans, which differs from the Auto figure in the plan table. Ask for the number in your order form.

Turnaround depends on the plan. A manual pentest takes 10 to 15 working days. For Pentest Auto the page says the first report arrives on the first day. Both figures come from the pricing page.

## How does an Astra quote compare in structure with other providers?

Astra bills per target per year. Intruder bills per test, Detectify bills an annual platform fee, Pentest-Tools.com bills per month by asset tier, and Horizon3.ai bills per asset. These units do not convert into each other.

A one-year price at Astra includes continuous or repeated work on a target. A per-test price covers one test. To compare them, price the same scope for 12 months, with the same number of retests. The [penetration testing cost guide](/guides/penetration-testing-cost/) explains the units, and the [pricing hub](/pricing/) lists every provider with a published price.

## Which providers publish a price in a similar unit?

Providers that bill per year, or per target or asset, are the closest comparison. This list is A to Z and comes from the dataset.

| Provider | Published price | Unit |
|---|---|---|
| Detectify | From EUR 2,500 (Standard) | per year, annual platform fee |
| Horizon3.ai (NodeZero) | $50 (Core) | per asset, annual subscription |
| Pentest-Tools.com | From $140 (AppScan) | per month, 5 assets |
| ZeroThreat | $100 (Professional) | per target per month |

For per-test options, see [Astra Security alternatives](/compare/astra-security-alternatives/).

## What should you ask in the Astra quote request?

1. The plan, the number of targets and how Astra counts them.
2. The total for 12 months, in one currency, with taxes stated.
3. Whether the $199 monthly option exists for your plan and what it costs over a year.
4. The re-scan count and window in the order form, given the conflicting figures.
5. Whether the manual pentest covers your APIs, roles and environments.
6. The report format, a sample report and the evidence behind the compliance claims.
7. What changes when you add a target during the year.

Use the [scoping checklist](/tools/scoping-checklist/) to write the scope summary once and send it to every provider.

Found an error or a missing fact? [Send a correction](/methodology/#corrections).

## Questions

### How much does an Astra pentest cost?

On 9 November 2026 Astra listed Pentest Auto at $2,999 per year, Pentest Expert at $5,999 per year and Pentest Enterprise from $9,999 per year. Each price covers a stated number of targets, so a larger scope costs more. Confirm the final figure in a quote.

### What counts as one Astra target?

Astra's pricing page says one web or SaaS app is 1 target. Mobile apps are priced per platform, and shared-codebase mobile apps start at $2,200 per app. Check how Astra counts your APIs, environments and staging copies.

### How many re-scans does Astra include?

The pricing page lists 1 re-scan for Auto, 2 for Expert and 4 for Enterprise. The window is 30 days for Auto and Expert and 90 days for Enterprise. The page FAQ says 2 re-scans for its PTaaS plans, which conflicts with the Auto figure.

### Does Astra publish a sample report?

We found no public sample report on Astra's pages on 9 November 2026. The pages claim CREST, PCI-ASV and CERT-IN compliant reports but give no accreditation link, so we list no credential. Ask for a sample report before you buy.

## Sources

- [Astra pricing](https://www.getastra.com/pricing)
- [PentestCompare provider dataset (Astra Security record)](https://pentestcompare.com/providers/astra-security/)