# LRQA (Nettitude): pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/lrqa-nettitude/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

LRQA (Nettitude) at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

LRQA lists network, web, mobile, wireless, cloud, AI and social engineering testing, red and purple teaming, and testing as a service with black, grey and white box options.
- Website: https://www.lrqa.com/
- Type: Assurance and cyber security provider (Nettitude is now part of LRQA)
- Headquarters: Not published
- Services listed: network, web-app, mobile, wireless, social-engineering, cloud, ai-llm, red-team, vuln-assessment
- Delivery: human-led. Human-led; also continuous penetration testing with attack surface management.
- Scope: Web apps yes; APIs unknown; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: custom quote
- Pricing note: No prices are published on the pages checked. Quotes depend on scope.
- Turnaround: Mobile tests: start within two weeks and usually at least three days per application. (No report delivery time is stated.)
- Retesting: Not published
- Sample report: not published 
- Credentials: CREST member: Penetration Testing, Vulnerability Assessment, Threat Led Penetration Testing and other schemes (listed as LRQA, formerly Nettitude) (https://marketplace.crest.org/lrqa)
- Compliance mentioned: Not published
Good fit when: Regulated or enterprise buyers that need CREST-listed testing, including threat-led and red team work, from a large assurance group.
Tradeoffs: No prices or retest terms are published. The page checked is the US FAQ; it gives no report turnaround and no sample report.
Last checked: 2026-11-09
Sources:
- LRQA penetration testing FAQ (US site): https://www.lrqa.com/en-us/penetration-testing-services/penetration-testing-services-faq/ (checked 2026-11-09)
- LRQA on CREST: https://marketplace.crest.org/lrqa (checked 2026-11-09)