# Stingrai: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/stingrai/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Stingrai at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Stingrai is a Toronto-headquartered pentest firm with a London office. It sells a US$3,000 autonomous web pentest, a US$6,800 hybrid pentest and quoted human-led services.
- Website: https://www.stingrai.io/
- Type: Penetration testing consultancy and platform
- Headquarters: Canada
- Services listed: web-app, api, mobile, ai-llm, network, wireless, cloud, social-engineering, physical, red-team
- Delivery: hybrid. Three offers: an autonomous AI agent (Snipe), a hybrid of Snipe plus certified testers, and human-led enterprise engagements.
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: mixed
  - Autonomous Pentest: US$3,000 per assessment (One web application and associated APIs; up to 200 endpoints or dynamic pages and 3 user roles; same-day results; automated retests; AutoFix pull requests.) https://www.stingrai.io/pricing
  - Hybrid Pentest: US$6,800 per assessment (One web application and associated APIs; Snipe plus manual testing and expert validation; attestation letter; 12 monthly vulnerability scans after the pentest.) https://www.stingrai.io/pricing
- Pricing note: Enterprise is a custom quote; the site promises pricing within 24 hours of the quote form. Prices are in USD unless stated.
- Turnaround: Autonomous Pentest: same-day results. (Automated run; other tiers state no turnaround.)
- Retesting: Automated retests are listed on the Autonomous plan; the page says retests are included in the fixed plans. No window is stated.
- Sample report: public https://www.stingrai.io/api/sample-pentest-report/download
- Credentials: CREST accredited for Penetration Testing and AI-Enabled Penetration Testing (stated on the Stingrai site; links to CREST marketplace listing) (https://marketplace.crest.org/supplier/stingrai-inc/)
- Compliance mentioned: SOC 2, ISO 27001, CMMC, PCI DSS, HIPAA
Good fit when: Teams with one web application that want a fixed-price AI or hybrid pentest with a public sample report, plus a path to human-led network, social and red team work.
Tradeoffs: Fixed prices cover one web application only; anything larger is quoted. The CREST listing page was not readable by automated fetch (HTTP 403), so the accreditation rests on the CREST link on the Stingrai site.
Last checked: 2026-11-09
Sources:
- Stingrai homepage: https://www.stingrai.io/ (checked 2026-11-09)
- Stingrai pricing: https://www.stingrai.io/pricing (checked 2026-11-09)