CYBRI
CYBRI is a New York pentest-only firm founded in 2017. It publishes four starting-price tiers for web, API, cloud, network and AI testing, with compliance-mapped reports.
Visit CYBRI Back to comparison
Last checked 9 November 2026. Facts come from CYBRI's own public pages, linked below.
At a glance
| Type | Penetration testing consultancy |
|---|---|
| Headquarters | United States |
| Services listed | Web application penetration testing, API penetration testing, Cloud penetration testing, Mobile app penetration testing, Network penetration testing, AI and LLM penetration testing, Red teaming, Social engineering testing source |
| Delivery | human-led The site describes manual-first testing by one or two Red Team members with OSCP, OSWE and CEH certifications. |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: yes Mobile: yes AI apps: yes |
| Pricing model | published |
| Turnaround | From 5 business days (Web Application and Custom), 10 (Web, API, Cloud or AI), 15 (Multiple Apps). Whole engagement including reporting; clock starts at full asset access. source |
| Retesting | Remediation testing is included in the $9,500 and $20,000 tiers. Unlimited remediation testing with an extended window is listed as an add-on. The Web Application tier does not state it. source |
| Sample report | not published |
| Compliance mentioned | SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NYDFS, SEC, ISO 42001 |
| Integrations | Not published |
Pricing
| Plan or item | Price | Unit | What it covers |
|---|---|---|---|
| Web Application | $5,000 | starts at, per engagement | 1 target/URL, authenticated test with up to 2 user roles; from 5 business days. source |
| Web App, API, Cloud, or AI | $9,500 | starts at, per engagement | Web, API, cloud configuration review or AI/agentic workflow testing; from 10 business days; remediation testing included. source |
| Multiple Apps, APIs, and Clouds | $20,000 | starts at, per engagement | Web, mobile, API, cloud and network; from 15 business days; remediation testing and support included. source |
| Custom Projects | $2,500 | starts at, per engagement | Network, black box web app, mobile, red team, phishing simulation or awareness training; from 5 business days. source |
All are starting prices; final price depends on scope. Duration includes testing, reporting and delivery and starts when full access to in-scope assets is received.
Credentials
No credentials with public evidence found.
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Startups and mid-size SaaS teams that want published starting prices for manual-first web, API and cloud tests mapped to SOC 2, ISO 27001 or HIPAA.
Tradeoffs
Prices are starting prices only. No company credentials, sample report or CREST evidence on its own pages. Retest terms differ by tier.
Sources
- CYBRI homepage (checked 9 November 2026)
- CYBRI pricing (checked 9 November 2026)
- CYBRI contact (New York address) (checked 9 November 2026)
- CYBRI privacy policy (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- DeepStrikeDeepStrike is a US-registered penetration testing firm with a UAE office. It lists web, mobile, cloud, infrastructure, red team and social engineering…
- PacketlabsPacketlabs is a Toronto-headquartered penetration testing firm. It lists application, API, mobile, AI/LLM, infrastructure, cloud, IoT, red team, social…
- VumetricVumetric (Vumetric by TELUS) is a Canadian penetration testing provider. It lists network, application, API, mobile, cloud, IoT, SCADA, wireless, code review…