--- title: "Penetration Test Cost Calculator: How ScopeCheck Works" url: https://mr-cyber.com/blog/penetration-test-cost-calculator language: en description: "How ScopeCheck turns a few plain questions into a binding fixed pentest price, how the price is set, and what happens when the scope is different." --- - [Guides](https://mr-cyber.com/blog/tags/guides) - [Pricing](https://mr-cyber.com/blog/tags/pricing) # Pentest price upfront: how ScopeCheck works ScopeCheck is Mr Cyber's pentest price calculator. You answer up to three counted questions about your system and get a binding fixed price for that scope, valid for 30 days. Your answers about the scope set the test days, and the fixed price follows, the same for every client. By [Moez Bouzayani](https://mr-cyber.com/about) · 19 October 2026 · 2 min read Most companies asking about a pentest want to know one thing first: what will it cost? Usually the answer is “it depends”, followed by a sales call and a quote a week later. ScopeCheck gives you the answer on the spot, as a fixed price you can rely on. ## What ScopeCheck is ScopeCheck is built into our [pentest cost calculator](https://mr-cyber.com/quote). You choose a service, for example a web application or an internal network pentest, and answer up to three questions. Each question asks for a number you can usually find out in a minute: - how many screens or pages your web application has, - how many types of users there are, such as customer and admin, - how many computers and servers are in your network, - how many lines of code your developers want reviewed. You never enter IP addresses, domains or names. Every question has a “Not sure” answer. ## How the price is set Your answers about the scope set the test days, and the fixed price follows from them. The rule is the same for every client. The starting price covers a small, typical scope and already includes a number of test days. Your answers add test days where the scope is bigger. A web application with many user types, for example, needs more time to check that every user only sees their own data. The result shows two numbers: the fixed price and the test days it includes. That way you can see what you are paying for. “Not sure” is priced as the smallest option, so it never raises the price above the starting price on our pricing page. The free call then checks the real numbers, and the price follows them. ## Why test days A manual pentest is mostly the time of an experienced tester. Tools help, but the findings that matter, such as broken access control or flaws in business logic, come from a person working through your system. The size of the scope decides how many days that takes. Pricing by test days makes the link between scope and price visible. ## Binding, with one honest condition The ScopeCheck price is binding for the scope you entered and stays valid for 30 days. If you answered “Not sure”, you still get a price, and we set the exact scope with you. If the scope turns out different, you get a new fixed price on the same basis before any work begins. It can go down as well as up. If you do not want to go ahead, you cancel at no cost. The contract only starts with your written order and the signed testing authorisation. Every pentest needs that authorisation anyway, because testing without permission is not allowed. ## When ScopeCheck shows no price Some scopes need a conversation first: very large networks, work on site such as Wi-Fi tests, production and OT networks, and vehicle components. ScopeCheck then shows no price and offers you the free call instead. You get a fixed-price quote afterwards. ## What is always included Whatever the price, it includes the report, a debrief call with your team and a free retest of fixed findings within the retest period shown on our pricing page. We work for businesses only. ## FAQ How is the ScopeCheck price calculated? Your answers about the scope set the test days, and the fixed price follows from them, the same for every client. Web application pentests, for example, start at €2,900. Is the price binding? Yes, for the scope you entered and for 30 days. If you'd like to talk anything through, a free call is always possible. Why does a pentest price depend on test days? A manual pentest is mostly the time of an experienced tester. The size of what you want tested decides how many days a careful test needs. Can a calculator price every pentest? No. Very large scopes, on-site work, production networks and vehicle components need a short conversation first. ScopeCheck then asks you to book the free call.