{
 "title": "What 66 penetration testing providers do not publish",
 "page": "https://pentestcompare.com/research/what-pentest-providers-do-not-publish/",
 "source": "https://pentestcompare.com/data/providers.json",
 "publisher": "Excession Labs",
 "license": "MIT",
 "providers": 66,
 "publisher_row_excluded": true,
 "checked": [
  "2026-11-09"
 ],
 "price": {
  "published": 21,
  "price_rows": 68,
  "pricing_model": {
   "custom quote": 37,
   "mixed": 9,
   "published": 12,
   "not published": 8
  }
 },
 "sample_report": {
  "public": 14,
  "not published": 45,
  "on request": 7
 },
 "turnaround": {
  "claim": 31,
  "main_timeline_not_published": 4,
  "states_a_time": 27,
  "ends_at_report": 7,
  "none": 35
 },
 "retest": {
  "statement": 38,
  "limit_stated": 21,
  "statement_without_limit": 17,
  "none": 28
 },
 "credentials": {
  "with_evidence": 31,
  "none": 35,
  "crest": 16,
  "iso27001": 8,
  "soc2": 8,
  "pci_assessor_or_asv": 4,
  "ncsc_check": 2
 },
 "hq_country_published": 33,
 "compliance_mentions_any": 45,
 "integrations_any": 35,
 "scope_unknown": {
  "web_app": 9,
  "api": 19,
  "cloud": 24,
  "network": 21,
  "mobile": 27,
  "ai_apps": 24
 },
 "scope_all_known": 19,
 "core_facts_published_distribution": {
  "0": 9,
  "1": 17,
  "2": 20,
  "3": 10,
  "4": 6,
  "5": 4
 },
 "core_facts": [
  "price_published",
  "sample_report public",
  "turnaround states a time",
  "retest_statement",
  "credential_with_evidence"
 ],
 "core_by_delivery": {
  "human-led": {
   "providers": 32,
   "all_five": 1,
   "none": 6
  },
  "hybrid": {
   "providers": 19,
   "all_five": 1,
   "none": 1
  },
  "automated": {
   "providers": 15,
   "all_five": 2,
   "none": 2
  }
 },
 "not_in_dataset": [
  "methodology document",
  "individual tester certifications",
  "insurance",
  "report format"
 ]
}