Provider profile
BreachLock
BreachLock offers human-led pentesting as a service from an in-house team, alongside attack surface discovery and an autonomous testing product. Pricing is tiered but quote-only.
Visit BreachLock Back to comparison
Last checked 9 November 2026. Facts come from BreachLock's own public pages, linked below.
At a glance
| Type | PTaaS platform |
|---|---|
| Delivery | hybrid Human-led PTaaS by an in-house team described as expert-led and AI-accelerated, plus a separate autonomous product (Breach360). |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: yes Mobile: yes AI apps: not published |
| Pricing model | custom quote |
| Turnaround | Pentests can be scoped and started within 24-48 hours. Time to start a test. Test length and report delivery are not stated. source |
| Retesting | Free manual retests: 1 (Standard), 2 (Extended), custom (Extensive). The PTaaS product text also promises unlimited retesting. source |
| Sample report | on request |
| Compliance mentioned | PCI DSS, ISO 27001, HIPAA, SOC 2, GDPR, DORA, NIST CSF 2.0 |
| Integrations | Not published |
Pricing
Prices are not published. You need to ask for a quote.
The pricing page describes Standard, Extended and Extensive tiers but lists no dollar figures; every tier links to a quote or discovery call.
Credentials
- CREST-accredited provider evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Buyers who want a CREST-accredited in-house human team with audit-ready reports and a defined free-retest count per tier.
Tradeoffs
No prices or sample report are published. Retest allowances are stated differently in the tier table and the product text.
Sources
- BreachLock pentest pricing (checked 9 November 2026)
- BreachLock homepage (checked 9 November 2026)
See something wrong or out of date? Send a correction.