Stingrai
Stingrai is a Toronto-headquartered pentest firm with a London office. It sells a US$3,000 autonomous web pentest, a US$6,800 hybrid pentest and quoted human-led services.
Visit Stingrai Back to comparison
Last checked 9 November 2026. Facts come from Stingrai's own public pages, linked below.
At a glance
| Type | Penetration testing consultancy and platform |
|---|---|
| Headquarters | Canada |
| Services listed | Web application penetration testing, API penetration testing, Mobile app penetration testing, AI and LLM penetration testing, Network penetration testing, Wireless penetration testing, Cloud penetration testing, Social engineering testing, Physical penetration testing, Red teaming source |
| Delivery | hybrid Three offers: an autonomous AI agent (Snipe), a hybrid of Snipe plus certified testers, and human-led enterprise engagements. |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: yes Mobile: yes AI apps: yes |
| Pricing model | mixed |
| Turnaround | Autonomous Pentest: same-day results. Automated run; other tiers state no turnaround. source |
| Retesting | Automated retests are listed on the Autonomous plan; the page says retests are included in the fixed plans. No window is stated. source |
| Sample report | public source |
| Compliance mentioned | SOC 2, ISO 27001, CMMC, PCI DSS, HIPAA |
| Integrations | Jira, Slack, Code repositories (AutoFix pull requests) |
Pricing
| Plan or item | Price | Unit | What it covers |
|---|---|---|---|
| Autonomous Pentest | US$3,000 | per assessment | One web application and associated APIs; up to 200 endpoints or dynamic pages and 3 user roles; same-day results; automated retests; AutoFix pull requests. source |
| Hybrid Pentest | US$6,800 | per assessment | One web application and associated APIs; Snipe plus manual testing and expert validation; attestation letter; 12 monthly vulnerability scans after the pentest. source |
Enterprise is a custom quote; the site promises pricing within 24 hours of the quote form. Prices are in USD unless stated.
Credentials
- CREST accredited for Penetration Testing and AI-Enabled Penetration Testing (stated on the Stingrai site; links to CREST marketplace listing) evidence
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Teams with one web application that want a fixed-price AI or hybrid pentest with a public sample report, plus a path to human-led network, social and red team work.
Tradeoffs
Fixed prices cover one web application only; anything larger is quoted. The CREST listing page was not readable by automated fetch (HTTP 403), so the accreditation rests on the CREST link on the Stingrai site.
Sources
- Stingrai homepage (checked 9 November 2026)
- Stingrai pricing (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- 7ASecurity7ASecurity Ltd., Dublin, Ireland, tests web, mobile, cloud, internal and external networks, code and AI/LLM systems. It includes free fix verification and…
- A-LIGNA-LIGN offers tiered penetration tests across external and internal networks, web apps, cloud, hybrid and OT/ICS, with red team, social engineering and…
- AikidoAikido sells an AI pentest with fixed and scoped pricing, plus continuous testing. Reports are aimed at SOC 2, ISO 27001 and HIPAA evidence, and a human-led…
- Astra SecurityAstra sells annual pentest plans from an autonomous test to manual expert testing, plus separate DAST, API and cloud scanner plans, all with prices on its…