Vulnerability assessment services: providers compared
A vulnerability assessment finds and ranks known weaknesses in your systems, usually with scanners and a human review of the results. It does not try to exploit them the way a penetration test does. The table lists providers that state vulnerability assessment, A to Z and unranked. Compare scope, scan frequency, price units and what the report contains.
Buyers who search for vulnerability assessment services want one of two things: a recurring scan of their systems, or a one-off review with a ranked list of fixes. This page filters the PentestCompare dataset to providers whose pages state vulnerability assessment. Rows run A to Z, no provider pays for position, and each fact links to the provider's own page with the date we checked it.
17 of 17 providers shown (67 in the full table). Sorted A to Z, not ranked. Checked up to 9 November 2026.
| Provider | Delivery | Web apps | APIs | Cloud | Network | Mobile | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|---|
| A-LIGNConsultancy | human-led | Yes | ? | Yes | Yes | ? | ? | Custom quote | Not published | Not stated. The page mentions RADAR monitoring between annual tests… | not published |
| Astra SecurityPTaaS platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $2,999 per year (card also shows $199 per month) +3 more | Manual pentest: 10-15 working days. Pentest Auto: first report the… | Re-scans included: Auto 1, Expert 2, Enterprise 4; window 30 days… | not published |
| Cyberis (Cyberis Reply)Penetration testing and cyber security consultancy | human-led | Yes | ? | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | not published |
| DetectifyApplication security platform | automated | Yes | Yes | ? | ? | ? | ? | from EUR 0 per year (annual platform fee) +4 more | Not published | Not stated on the pricing page. | not published |
| Halo SecurityPTaaS platform | hybrid | Yes | Yes | ? | Yes | Yes | ? | Custom quote | Not published | One round of retesting is included; Halo verifies fixes and issues… | not published |
| IntruderApplication security platform, United Kingdom | automated | Yes | ? | ? | ? | ? | ? | $3,500 per test +2 more | Setup in minutes; results within hours; the pricing page says… | Unlimited retesting on the single test and the 4-pack. Packs expire… | not published |
| JUMPSECConsultancy, United Kingdom | human-led | ? | ? | ? | ? | ? | Yes | Custom quote | Not published | Not stated. The page recommends testing quarterly or semi-annually… | not published |
| LRQA (Nettitude)Assurance and cyber security provider (Nettitude is now part of LRQA) | human-led | Yes | ? | Yes | Yes | Yes | Yes | Custom quote | Mobile tests: start within two weeks and usually at least three days… | Not published | not published |
| ParameterAI-assisted testing service | automated | Yes | Yes | ? | ? | ? | ? | Custom quote | First findings in 24 hours; most runs finish the same day they start. | Free re-testing is listed for Single App and inherited by higher… | Public |
| Pentest PeoplePenetration testing provider (part of WorkNest Secure) | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Not published | Not published | not published |
| Pentest-Tools.comVulnerability scanning and pentest platform | hybrid | Yes | Yes | Yes | Yes | ? | Yes | from $96 per month, 16 assets +3 more | Not published | Unlimited rescans on all paid plans (tool scans). | not published |
| Prescient SecurityConsultancy | hybrid | Yes | Yes | Yes | Yes | Yes | ? | from $6,000 per engagement (scope-based) +5 more | Not published | Cait: up to 2 retests within 30 days of each scan. No retest terms… | not published |
| RunSybilAutonomous testing platform | automated | Yes | Yes | Yes | ? | ? | ? | Custom quote | Not published | No retest policy; the platform re-evaluates on every deployment and… | on request |
| SecuritumConsultancy, Poland | human-led | Yes | ? | Yes | Yes | Yes | Yes | 640 EUR to 890 EUR per man day +1 more | Not published. Typical engagement length is 1 to 4 weeks for a… | Not published | Public |
| TurboPentestAI-assisted testing service | automated | Yes | Yes | ? | Yes | ? | Yes | $99 per credit (one pentest) +4 more | All tiers typically complete in a few hours. | A retest is a full new pentest at the same per-target price; no… | Public |
| usd AGConsultancy, Germany | human-led | ? | ? | Yes | ? | Yes | Yes | Custom quote | Not published | Not published | not published |
| ZeroThreatAutonomous testing platform | automated | Yes | Yes | ? | ? | ? | ? | $100 per target per month +2 more | Not published | Professional: unlimited retesting. Pay Per Scan: unlimited retesting… | not published |
No provider matches every filter. Remove a filter to see more.
"?" means the provider does not say on its public pages. It does not mean "no". Prices use each provider's own unit: a test, a year, a month or credits. Do not compare them as equal units. How we collect and check this data.
What does a vulnerability assessment cover?#
A vulnerability assessment finds weaknesses and ranks them by risk. NIST's glossary defines it as a "systematic examination of an information system or product to determine the adequacy of security measures" (CNSSI 4009-2022, NIST CSRC). In practice scanners do most of the work and a person reviews the output.
The assessment stops where a penetration test starts. A pentest has a tester attempt to "circumvent or defeat the security features of a system" (NIST CSRC) and so proves the effect. Our guide to pentest versus vulnerability scan has a decision table and the PCI DSS split between scans and pentests.
Typical assessment targets are:
- External hosts and web apps, scanned from the internet.
- Internal networks, scanned from inside with credentials.
- Cloud accounts and container images, checked against configuration rules.
- Web apps and APIs, scanned with a dynamic scanner (DAST).
Providers on this page vary in all four. Check the Scope columns in the table for web, API, cloud and network.
Who needs a vulnerability assessment, and when?#
You need one when you must show regular, repeatable checking of known weaknesses. Common reasons are a customer questionnaire, a compliance scan requirement and an asset list that grows faster than staff can review.
Buy a pentest instead, or as well, when you need to know whether an attacker can chain weaknesses into real access. Many teams run scans continuously and a pentest once or twice a year.
Scanning for payment card compliance has its own rule. PCI DSS asks for external scans by an Approved Scanning Vendor. In the dataset, Halo Security lists PCI SSC Approved Scanning Vendor status with certificate 5078-01-11 (Halo Security), and Detectify lists PCI ASV scanning in its price plans (Detectify). Verify any ASV claim in the PCI SSC list of vendors before you rely on it.
What should you ask vulnerability assessment providers?#
Ask for written answers to these six questions.
- Which assets are in scope, and how does the quote count them (host, domain, target, credit)?
- Does a person confirm each finding and remove false positives before the report?
- Do scans run with credentials (authenticated) or only from outside?
- How often do scans run, and how fast do new checks arrive after a new vulnerability is published?
- What does a rescan cost after you fix issues, and how many rescans does the quote include?
- Does the report rank findings by exploitability or only by a severity score?
The Retest column in the table shows each provider's statement on rescans. Many providers answer "Not published".
What drives the price?#
Price units differ so much that one number never compares two quotes. The dataset shows five patterns, taken from provider price pages checked on 9 November 2026.
| Provider | Published unit | Example |
|---|---|---|
| Detectify | Annual platform fee | Standard from EUR 2,500 per year |
| Pentest-Tools.com | Monthly plan by assets | AppScan from $140 per month, 5 assets |
| ZeroThreat | Per target or per credit | Professional $100 per target per month |
| Securitum | Per man day | 640 EUR to 890 EUR per man day |
| Intruder | Per test | $3,500 per test |
Sources: Detectify, Pentest-Tools.com, ZeroThreat, Securitum and Intruder. The Intruder row is a pentest product, listed because Intruder also states vulnerability assessment.
Most firms in the table quote on request. For a fair comparison, give each provider the same asset list and ask for a total for twelve months.
How do you read the table?#
The table shows what a provider states, not how well it works. Rows run A to Z. "Not published" means we found no statement on the provider's pages.
Start with the Delivery column. Automated providers sell software that scans on a schedule. Human-led providers sell analyst time. Hybrid providers do both. The labels often hide a large gap in the amount of human review, so use question 2 above to settle it.
Then check the Published price column. A listed price means you can budget before you talk to sales. It does not mean the price fits your asset count.
Which scoping mistakes cause trouble?#
- The asset list is out of date. A scan can only report on what it can reach. Include forgotten domains, test systems and cloud accounts.
- Scans run unauthenticated only. An application behind a login stays unchecked without a test account.
- Scanner traffic hits production with no limits. Agree the scan rate and the time window first.
- The buyer assumes the report proves exploitability. A scan finding says a weakness may exist. Ask the provider to mark which findings a person confirmed.
Use the scoping checklist to list assets, roles and limits before you ask for quotes.
Questions
What is the difference between a vulnerability assessment and a penetration test?
An assessment lists weaknesses and ranks them. A penetration test tries to exploit them and shows the effect. Many services mix the two under one name, so ask the provider whether a person confirms each finding and whether the report shows proof.
How often should we run a vulnerability assessment?
It depends on how fast your systems change and on any standard you follow. Scanners run weekly or after each release for many teams. PCI DSS has its own scan rules in requirement 11.3. Ask your auditor which interval they expect.
Do scan prices include a human review?
Not always. Platform plans such as Detectify and Pentest-Tools.com sell software access by period. Managed services add analyst time and cost more. Check whether the quote names a person who removes false positives.
What scope units do vulnerability assessment quotes use?
Providers price by asset, by target, by scan credit, by year or by engagement. These units do not convert to each other. Count your assets first, then ask each provider for a total for the same list.
Does a clean scan mean we are secure?
No. A scan only finds issues it has checks for. It does not find flaws in business logic or broken access control that need a person. A clean result is a data point on one date.
Sources
- NIST CSRC glossary: vulnerability assessment (checked 9 November 2026)
- NIST CSRC glossary: penetration testing (checked 9 November 2026)
- Detectify: pricing (checked 9 November 2026)
- Pentest-Tools.com: pricing (checked 9 November 2026)
- ZeroThreat: pricing (checked 9 November 2026)
- Halo Security: PCI compliance (checked 9 November 2026)
- Securitum: pricing (checked 9 November 2026)
Compare like with like
An automated scan, a manual test and annual credits are different units. Check scope, delivery and retest terms before price.