# Schellman: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/schellman/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Schellman at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Schellman, a Tampa-based compliance and attestation firm, offers application, network, mobile, cloud, physical, hardware/IoT, social engineering, red team and AI red team testing.
- Website: https://www.schellman.com/
- Type: Consultancy
- Headquarters: United States
- Services listed: web-app, api, network, wireless, mobile, cloud, physical, iot, red-team, social-engineering, ai-llm
- Delivery: human-led. Penetration tests by background-checked staff testers, led by a manager under a director; part of a compliance and attestation firm.
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: custom quote
- Pricing note: No prices. The page links a scoping request.
- Turnaround: Not published
- Retesting: Not stated on the page.
- Sample report: public https://www.schellman.com/services/penetration-testing
- Credentials: Accredited FedRAMP 3PAO (as stated by Schellman) (https://www.schellman.com/services/penetration-testing); Qualified Security Assessor (QSA) and PA-QSA for P2PE (as stated by Schellman) (https://www.schellman.com/services/penetration-testing)
- Compliance mentioned: SOC 2, PCI DSS, ISO 27001, FedRAMP, CMMC, HITRUST, HIPAA, DORA
Good fit when: Organizations that already need audits or attestations and want pen testing from the same firm.
Tradeoffs: No prices, turnaround or retest terms. The sample report link was named on the page but its URL was not opened. Credential evidence is the firm's own page, not the accrediting body's directory.
Last checked: 2026-11-09
Sources:
- Schellman penetration testing: https://www.schellman.com/services/penetration-testing (checked 2026-11-09)