# Astra Security: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/astra-security/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Astra Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Astra sells annual pentest plans from an autonomous test to manual expert testing, plus separate DAST, API and cloud scanner plans, all with prices on its pricing page.
- Website: https://www.getastra.com/
- Type: PTaaS platform
- Headquarters: Not published
- Services listed: web-app, api, network, cloud, mobile, ai-llm, vuln-assessment
- Delivery: hybrid. Pentest Auto is an autonomous AI-agent test; Pentest Expert and Enterprise add a manual pentest by certified experts.
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: published
  - Pentest Auto: $2,999 per year (card also shows $199 per month) (1 target, web apps and SaaS only; role-based graybox, PTaaS dashboard, 1 human re-scan.) https://www.getastra.com/pricing
  - Pentest Expert: $5,999 per year (Auto plus manual pentest by certified experts; web, mobile, cloud, network, AI, MCP targets; 2 re-scans; compliance-ready reports.) https://www.getastra.com/pricing
  - Pentest Enterprise: from $9,999 per year (Expert plus private cloud or on-prem deployment, continuous autonomous pentesting, API scanner for 100 endpoints, custom SLA.) https://www.getastra.com/pricing
  - Scanner Lite: $69 monthly / $699 annual per target (1 target, 3 scans per month (DAST).) https://www.getastra.com/pricing
- Pricing note: One web or SaaS app is 1 target; mobile is priced per platform; shared-codebase mobile apps start at $2,200 per app. The page shows conflicting figures in places (for example $999 per year for Scanner). Other DAST, API and cloud plans exist and are not listed here.
- Turnaround: Manual pentest: 10-15 working days. Pentest Auto: first report the same day. (Stated on the pricing page.)
- Retesting: Re-scans included: Auto 1, Expert 2, Enterprise 4; window 30 days (Auto, Expert) or 90 days (Enterprise). The page FAQ says 2 re-scans for PTaaS plans.
- Sample report: not published 
- Credentials: None with public evidence found
- Compliance mentioned: SOC 2, ISO 27001, HIPAA, PCI DSS
Good fit when: Teams that want published annual pricing for a pentest with an optional manual layer and bundled scanning.
Tradeoffs: The page claims CREST, PCI-ASV and CERT-IN compliant reports but gives no accreditation link, so no credential is listed. The pricing page has inconsistent figures. No sample report.
Last checked: 2026-11-09
Sources:
- Astra pricing: https://www.getastra.com/pricing (checked 2026-11-09)