Secure Ideas pricing: flat fees, hourly rate and credits

Secure Ideas pricing is published, which is rare for a human-led firm. The pricing page lists starting flat fees by test type, an hourly rate and a prepaid credit plan. This page records those figures as read on 9 November 2026 and shows where they stop. It is part of the pentest pricing index, and the full vendor record is in the Secure Ideas provider entry.

What does Secure Ideas charge for a pentest?#

Secure Ideas lists five prices. Three are flat fees that start at the smallest of four scope tiers. The other two are an hourly rate and a credit.

Source: Secure Ideas pricing, checked 9 November 2026. The page does not list the larger tiers, so their prices are Not published.

What does the price buy?#

The unit changes with the product. A flat fee is the price of one test at a defined scope. The hourly rate prices consulting time. A PETaaS credit is a prepaid day of effort that you spend on tests, retests or other work. You cannot divide a credit pool by a test count without a scope.

Two figures follow from the page by arithmetic. The day rate is 8 hours at $340, which gives $2,720. A credit at $2,520 is $200 below that day rate, or about 7 percent (our calculation). The 25-credit minimum is $63,000 at list price, before any discount.

Which plan fits which buyer?#

The vendor sells three routes, and the numbers show who each suits.

The credit route is a commitment, so it suits a team that already knows it will run several tests.

What drives the final cost?#

The page gives starting prices, and the homepage says most tests cost $10K to $45K. The gap between $8,160 and $45K is scope. The pricing page names two factors: attestation letters and retesting. Scope tier, number of roles, number of endpoints and environment are the usual drivers, but Secure Ideas does not publish a scoring rule for them, so ask how it sizes each tier.

What does Secure Ideas not publish?#

The pages checked do not state these:

• The scope limits of the three larger tiers and their prices.
• Retest price and window. Retesting is not included by default.
• Time to the final report. The homepage gives start time and test length only.
• Cloud and AI application testing. The dataset marks both as unknown.
• Headquarters country.

What are the delivery, retest and report terms?#

Testing usually starts two to four weeks after contracting and takes one to two weeks, per the homepage. That is time to start and test length, not report delivery. Retesting is a quote factor, not a default. A sample report is public, which lets you judge the write-up before a call. Use the sample report guide to read it. The vendor lists a CREST accredited company status on its homepage and mentions PCI DSS, HIPAA, SOC 2 and DORA.

Who does it fit, and what are the tradeoffs?#

Secure Ideas fits buyers who want an experienced manual team, published rates and a sample report to read first. The vendor says its in-house consultants run the tests and it does not rely on automated scans. The tradeoffs are cost and lead time. Entry prices sit above automated options, and a start two to four weeks after contract does not suit a release next week. Compare automated and hybrid options in the pentest cost guide and the comparison hub.

What should you ask before you buy?#

1. Which of the four scope tiers does my app fall in, and what does that tier cost?
2. Is a retest included, for how long, and at what price?
3. Do attestation letters change the price?
4. When is the final report due after testing ends?
5. If I buy credits, what happens to unused credits at the end of the term?

Found an error? Send a correction.