Fixed prices for penetration tests
You know what the test costs before we start. The price in the quote is the price on the invoice, and the retest is always included.
Prefer to talk first? Book a call
- All prices fixed
Prices at a glance
Every test in this table is a manual pentest.
What changes the price: size of the app, number of roles, endpoints or hosts.
Always included: retest within 60 days · debrief call · report in 5 business days · ticket import file · attestation letter
Services exclusively for businesses.
Continuous pentesting. One manual test day every month.
For teams that want, for example, their web app tested by hand every month, all year round. Unlike the monthly AI-assisted pentest (an AI-assisted run every 2 weeks), here a tester tests by hand every month.
€590 per month
1 manual test day per month
- 1 manual test day per month, used for your releases
- Save unused days within a calendar quarter for a big release
- Every release tested before or right after go-live
- Free retest of every fix
- Questions answered between releases
- Findings tracked in one running report
- Monthly check of your external attack surface
No minimum term, cancel monthly. 10% off when you pay a year upfront: €6,372 per year. Unused test days carry over within the calendar quarter and expire at its end.
Services exclusively for businesses.
AI-assisted pentest. A separate option, one-time or monthly.
AI agents run the test, a senior tester steers it and verifies every finding. An option you choose specifically; it complements a manual pentest rather than replacing it. Prices per target.
| Option | Price per target |
|---|---|
| One-time AI-assisted pentestEvery finding verified by the tester · a report within 5 business days · one free re-check of your fixes within 30 days | €590 one-time |
| Monthly AI-assisted pentestA full run every 2 weeks · every finding verified by the tester · a short report after each run, all findings kept in one running list · fixes re-checked in the next run or on request | €390 per month |
1 target = 1 web app, 1 API with up to 50 endpoints, 1 external range with up to 16 IP addresses, or 1 cloud account (1 AWS account, 1 Azure subscription or 1 Google Cloud project).
Monthly: no minimum term, cancel monthly. 10% off when you pay a year upfront (€4,212 per target per year). More targets: price × number of targets.
Services exclusively for businesses.
Included at no surcharge
No extra fee for the topic itself. If it needs more test days, the quote shows them upfront.
- Microsoft 365, Part of: Cloud pentest
- Kubernetes, Part of: Cloud pentest
- CI/CD, Part of: Secure code review
- Hardening review, Part of: Internal network pentest
- Wireless, Part of: Internal network pentest
- Phishing, Part of: Red teaming & assumed breach
- OSINT, Part of: External network pentest
- Hardware & firmware, Part of: IoT & hardware pentest
Engagement models. When a single test is not the right fit.
- Not a pentest
Vulnerability assessment
A lighter, scan-based check with manual verification. Not a pentest, and we tell you when you need one.
- Scan of up to 32 agreed IP addresses for known vulnerabilities
- Manual check of relevant results, false positives removed
- Short report with priorities and fixes
- Ready-to-import tickets for Jira, ServiceNow, GitLab, Azure DevOps and GitHub
- Email import for helpdesks like OTRS/Znuny, Zammad, TOPdesk and Matrix42
- Free re-scan of fixed findings
from €390 · up to 32 IP addresses
-
Assumed breach
Starts on a prepared workstation and shows how far an attacker gets, and what your team detects.
- One agreed scenario with written rules of engagement
- Objective-based testing from inside your network
- One purple-team session with your defenders
- Report with attack path and detection results
from €5,700 · 6 test days
-
OT & ICS security assessment
Production networks and control systems, assessed passive-first and in agreed windows to keep the impact on operations minimal.
- Passive review of documents and network traffic
- Active checks only on systems and in windows you release
- On-site work in DACH with your OT staff
- Report with IEC 62443 references
from €5,700 · 6 test days · plus travel
-
Smart contract audit
Manual security review of your Solidity contracts before or after deployment.
- Line-by-line review of one agreed commit
- Access control, funds handling, upgrades and external calls
- Report naming the reviewed commit
- Review of your fixes
from €4,700 · 5 test days
-
Automotive security testing
ECUs, telematics and infotainment, with evidence for ISO/SAE 21434 and your OEM. Quoted per project.
- Scope based on your TARA or component interfaces
- Bench tests, vehicle tests by arrangement
- Report structured for your ISO/SAE 21434 work products
Price on request
Services exclusively for businesses.
Get a binding fixed price in under a minute
In the quote form you answer up to three plain questions per service and see your binding fixed price and test days at once, valid for 30 days.
FAQ
Why fixed prices instead of day rates?
What does a penetration test typically cost?
Is the retest really free?
Are there discounts for multiple tests?
What should we test?
Pick one to start your request. You get your binding fixed price instantly, and the written offer (PDF) by email right after your request.
- Web application pentest
- API pentest
- iOS app pentest
- Android app pentest
- Desktop app pentest
- AI & LLM pentest
- IoT & hardware pentest
- Cloud pentest
- External network pentest
- Internal network pentest
- Active Directory pentest
- Red teaming & assumed breach
- Secure code review
- Continuous pentesting
- Vulnerability assessment
- AI-assisted pentest
- Not sure yet
Prefer to talk first? Book a call