# Halo Security: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/halo-security/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Halo Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Halo Security offers web, API, mobile, network, wireless, social engineering and red team pentests with one retest round, plus attack surface management and PCI ASV scanning.
- Website: https://www.halosecurity.com/
- Type: PTaaS platform
- Headquarters: Not published
- Services listed: web-app, api, mobile, network, wireless, social-engineering, red-team, vuln-assessment
- Delivery: hybrid. Pentests plus an attack surface management platform; the page does not say who runs each test.
- Scope: Web apps yes; APIs yes; Cloud unknown; Network yes; Mobile yes; AI apps unknown
- Pricing model: custom quote
- Pricing note: No prices. Pentests get a fixed-price quote based on scope after a scoping call; a plans page exists at /start but was not read.
- Turnaround: Not published
- Retesting: One round of retesting is included; Halo verifies fixes and issues an updated report.
- Sample report: not published 
- Credentials: PCI SSC Approved Scanning Vendor, certificate 5078-01-11 (https://www.halosecurity.com/pci-compliance/)
- Compliance mentioned: SOC 2, HIPAA, PCI DSS
Good fit when: Teams that want pentests and external attack surface monitoring from one vendor, with one retest round included.
Tradeoffs: No prices or turnaround. The page says Halo is not a CREST Accredited Member. Only report screenshots, no downloadable sample.
Last checked: 2026-11-09
Sources:
- Halo Security homepage: https://www.halosecurity.com/ (checked 2026-11-09)