Penetration testing providers
Profiles of penetration testing providers: what each tests, who does the testing, published prices, turnaround, retesting, credentials and sources.
Each profile uses the same fields, taken from the provider's own public pages, with the date we checked them. Profiles are in alphabetical order. Excession Labs, the publisher of this site, is one of them and is marked as the publisher.
Application security platform · automatedAikidoAikido sells an AI pentest with fixed and scoped pricing, plus continuous testing. Reports are aimed at SOC 2, ISO 27001 and HIPAA evidence, and a human-led CREST…PTaaS platform · hybridBreachLockBreachLock offers human-led pentesting as a service from an in-house team, alongside attack surface discovery and an autonomous testing product. Pricing is tiered but…PTaaS platform · hybridCobaltCobalt sells pentests through a platform that connects buyers with a network of vetted freelance testers, plus an autonomous pentest product. Work is bought mostly as…Application security platform · automatedEscapeEscape is an application security platform with AI-driven continuous pentesting, business-logic-aware DAST and external network pentesting. Tests can run on merge,…AI-assisted testing service · hybridExcession LabsExcession Labs tests web applications, APIs and multi-tenant SaaS platforms with Incursion, its own AI testing agent, and checks the evidence for each finding before it…Crowdsourced platform · hybridHackerOneHackerOne offers pentest as a service in two forms: a human-led H1 Pentest and an H1 Agentic Pentest where AI agents work under human review. Results stream into the…Autonomous testing platform · hybridHadrianHadrian Nova runs AI agent pentests against an application or environment the customer defines. Results stream live and a compliance-mapped PDF report is included.Autonomous testing platform · automatedHorizon3.ai (NodeZero)NodeZero is an autonomous pentesting platform covering internal, external, cloud, Kubernetes and Active Directory testing, with a newer web application module. List…AI-assisted testing service · automatedParameterParameter offers AI-agent pentesting for web apps, APIs and infrastructure, needing only a URL and credentials. One run produces executive, customer, auditor and…Consultancy · human-ledPen Test PartnersPen Test Partners is a cyber security consultancy offering manual pentesting, red teaming and compliance services across many sectors. A PTaaS subscription covers short…Consultancy · human-ledSecure IdeasSecure Ideas is a boutique offensive security consultancy. It sells fixed-fee projects and PETaaS prepaid credits, with published hourly rates and starting prices by…Crowdsourced platform · hybridSynackSynack sells pentests that mix an AI agent (Sara) with a vetted crowd of researchers, in point-in-time or continuous form. Pricing is published per product as a…AI-assisted testing service · hybridTerra SecurityTerra Security offers an AI-agent pentesting platform with human oversight through a workspace called TORCH. It covers web apps, AI red teaming, and external and…AI-assisted testing service · automatedTurboPentestTurboPentest sells self-service AI pentests bought as credits online, with three depth tiers and a monthly option. Each test includes a report and a signed attestation…Autonomous testing platform · automatedXBOWXBOW is an autonomous testing platform that runs many AI agents in parallel against web applications and APIs and validates findings with exploits. Buyers set scope,…
Missing a provider, or found an error? Send a correction or a suggestion.
Compare like with like
An automated scan, a manual test and annual credits are different units. Check scope, delivery and retest terms before price.