# CYBRI: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/cybri/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

CYBRI at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

CYBRI is a New York pentest-only firm founded in 2017. It publishes four starting-price tiers for web, API, cloud, network and AI testing, with compliance-mapped reports.
- Website: https://cybri.com/
- Type: Penetration testing consultancy
- Headquarters: United States
- Services listed: web-app, api, cloud, mobile, network, ai-llm, red-team, social-engineering
- Delivery: human-led. The site describes manual-first testing by one or two Red Team members with OSCP, OSWE and CEH certifications.
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: published
  - Web Application: $5,000 starts at, per engagement (1 target/URL, authenticated test with up to 2 user roles; from 5 business days.) https://cybri.com/pricing/
  - Web App, API, Cloud, or AI: $9,500 starts at, per engagement (Web, API, cloud configuration review or AI/agentic workflow testing; from 10 business days; remediation testing included.) https://cybri.com/pricing/
  - Multiple Apps, APIs, and Clouds: $20,000 starts at, per engagement (Web, mobile, API, cloud and network; from 15 business days; remediation testing and support included.) https://cybri.com/pricing/
  - Custom Projects: $2,500 starts at, per engagement (Network, black box web app, mobile, red team, phishing simulation or awareness training; from 5 business days.) https://cybri.com/pricing/
- Pricing note: All are starting prices; final price depends on scope. Duration includes testing, reporting and delivery and starts when full access to in-scope assets is received.
- Turnaround: From 5 business days (Web Application and Custom), 10 (Web, API, Cloud or AI), 15 (Multiple Apps). (Whole engagement including reporting; clock starts at full asset access.)
- Retesting: Remediation testing is included in the $9,500 and $20,000 tiers. Unlimited remediation testing with an extended window is listed as an add-on. The Web Application tier does not state it.
- Sample report: not published 
- Credentials: None with public evidence found
- Compliance mentioned: SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NYDFS, SEC, ISO 42001
Good fit when: Startups and mid-size SaaS teams that want published starting prices for manual-first web, API and cloud tests mapped to SOC 2, ISO 27001 or HIPAA.
Tradeoffs: Prices are starting prices only. No company credentials, sample report or CREST evidence on its own pages. Retest terms differ by tier.
Last checked: 2026-11-09
Sources:
- CYBRI homepage: https://cybri.com/ (checked 2026-11-09)
- CYBRI pricing: https://cybri.com/pricing/ (checked 2026-11-09)
- CYBRI contact (New York address): https://cybri.com/contact-us/ (checked 2026-11-09)
- CYBRI privacy policy: https://cybri.com/privacy-policy/ (checked 2026-11-09)