# Parameter: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/parameter/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Parameter at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Parameter offers AI-agent pentesting for web apps, APIs and infrastructure, needing only a URL and credentials. One run produces executive, customer, auditor and remediation reports.
- Website: https://www.parameter.ai/
- Type: AI-assisted testing service
- Delivery: automated. Autonomous AI agents run the pentest; they pause for the customer's approval before chaining or escalating.
- Scope: Web apps yes; APIs yes; Cloud unknown; Network unknown; Mobile unknown; AI apps unknown
- Pricing model: custom quote
- Pricing note: Three tiers (Single App, Rightsized, Continuous) with no dollar amounts; all go to sales. Pricing follows the size of what is tested, not seats.
- Turnaround: First findings in 24 hours; most runs finish the same day they start. (Time from start to first findings and typical run length.)
- Retesting: Free re-testing is listed for Single App and inherited by higher tiers.
- Sample report: public https://www.parameter.ai/parameter-assets/sample-pentest-report.pdf
- Credentials: SOC 2 Type I report (Type II observation period in progress) (https://www.parameter.ai/security)
- Compliance mentioned: SOC 2, ISO 27001, PCI DSS, FedRAMP, HIPAA
Good fit when: Teams that want a quick automated web app and API pentest with auditor-mapped reports and a public sample to review first.
Tradeoffs: No prices are published. The SOC 2 report is Type I only, and the Type II period is not complete.
Last checked: 2026-11-09
Sources:
- Parameter pentesting: https://www.parameter.ai/pentesting (checked 2026-11-09)
- Parameter homepage: https://www.parameter.ai/ (checked 2026-11-09)
- Parameter security: https://www.parameter.ai/security (checked 2026-11-09)