--- title: "Services: Fixed-Price Penetration Testing | Mr Cyber" url: https://mr-cyber.com/services language: en description: "All Mr Cyber penetration testing services at a glance: manual testing, fixed price, audit-ready report and free retest." --- # Penetration testing services Every test is manual and tailored to your system. You get a fixed price, an audit-ready report and a free retest. [See my fixed price](https://mr-cyber.com/quote) Prefer to talk first? [Book a call](https://mr-cyber.com/contact#book) - [## Web application pentest SaaS platforms, portals, shops and internal web apps, tested by hand against OWASP WSTG. from €2,900 · 3 test days](https://mr-cyber.com/services/web-application-penetration-testing) - [## API pentest REST and GraphQL APIs behind your apps, partners and integrations, tested against the OWASP API Top 10. from €2,400 · 3 test days](https://mr-cyber.com/services/api-penetration-testing) - [## iOS app pentest iPhone and iPad apps and the API behind them, tested by hand against OWASP MASVS. from €2,900 · 3 test days](https://mr-cyber.com/services/ios-app-penetration-testing) - [## Android app pentest Android apps and the API behind them, tested by hand against OWASP MASVS. from €2,900 · 3 test days](https://mr-cyber.com/services/android-app-penetration-testing) - [## Desktop app pentest Windows, macOS and Linux applications, thick clients and their servers, tested by hand. from €3,800 · 4 test days](https://mr-cyber.com/services/desktop-application-penetration-testing) - [## AI & LLM pentest Chatbots, RAG assistants, AI agents and LLM features in your product, tested against the OWASP LLM Top 10. from €2,900 · 3 test days](https://mr-cyber.com/services/ai-llm-penetration-testing) - [## IoT & hardware pentest Connected products end to end. Device, electronics, firmware, app and cloud, tested together. from €4,700 · 5 test days](https://mr-cyber.com/services/iot-hardware-penetration-testing) - [## Cloud pentest AWS, Azure and Google Cloud accounts, IAM and workloads, checked against CIS and tested by hand. from €3,300 · 4 test days](https://mr-cyber.com/services/cloud-penetration-testing) - [## External network pentest Public IPs, domains, VPN, mail and remote access, tested from an attacker's position on the internet. from €1,900 · 2 test days](https://mr-cyber.com/services/external-network-penetration-testing) - [## Internal network pentest Office and server networks, segmentation and critical systems, tested from an attacker's position inside. from €3,800 · 4 test days](https://mr-cyber.com/services/internal-network-penetration-testing) - [## Active Directory pentest On-premises Active Directory and hybrid Entra ID, checked for the paths from a normal user to domain admin. from €3,400 · 4 test days](https://mr-cyber.com/services/active-directory-penetration-testing) - [## Red teaming & assumed breach Multi-week, objective-based attack simulation that tests your detection and response, within agreed rules. from €9,500 · 10 test days](https://mr-cyber.com/services/red-teaming) - [## Secure code review Manual review of your source code for security flaws, against OWASP ASVS, with fixes per line. from €2,900 · 3 test days](https://mr-cyber.com/services/secure-code-review) - Not sure which test you need? [Book a scoping call](https://mr-cyber.com/contact#book) ## Monthly: Continuous pentesting One manual test day every month, for example for your web app all year round. Unlike the monthly AI-assisted pentest, which is an AI-assisted run every 2 weeks. [Continuous pentesting One manual test day every month, used for your releases. Fixed monthly price, cancel monthly. €590 per month · 1 test day per month · cancel monthly](https://mr-cyber.com/services/continuous-pentesting) ## Not a pentest: vulnerability assessment An automated scan of up to 32 external IP addresses, checked by hand. Lighter than a pentest, and we tell you when you need one. [Vulnerability assessment An automated scan of up to 32 external IP addresses, checked by hand. Not a pentest. €390 fixed price · up to 32 IP addresses](https://mr-cyber.com/services/vulnerability-assessment) ## Separate option: AI-assisted pentest All tests above are manual pentests. You choose the AI-assisted pentest specifically; it complements a manual pentest rather than replacing it. [AI-assisted pentest AI agents run the test, a senior tester steers it and verifies every finding. One-time or monthly. One-time €590 per target · monthly €390 per target](https://mr-cyber.com/services/ai-assisted-pentest) ## Also tested More topics we test inside the core tests, or as an engagement of their own. ### Inside a core test, no surcharge No extra fee for the topic itself. If it needs more test days, the quote shows them upfront. - [Microsoft 365, Cloud pentest](https://mr-cyber.com/services/cloud-penetration-testing#m365) - [Kubernetes, Cloud pentest](https://mr-cyber.com/services/cloud-penetration-testing#kubernetes) - [CI/CD, Secure code review](https://mr-cyber.com/services/secure-code-review#cicd) - [Hardening review, Internal network pentest](https://mr-cyber.com/services/internal-network-penetration-testing#hardening) - [Wireless, Internal network pentest](https://mr-cyber.com/services/internal-network-penetration-testing#wireless) - [Phishing, Red teaming & assumed breach](https://mr-cyber.com/services/red-teaming#phishing) - [OSINT, External network pentest](https://mr-cyber.com/services/external-network-penetration-testing#osint) - [Hardware & firmware, IoT & hardware pentest](https://mr-cyber.com/services/iot-hardware-penetration-testing#hardware) ### Engagement models Priced separately from the core tests. - [Assumed breach, from €5,700](https://mr-cyber.com/services/red-teaming#assumedbreach) - [OT & ICS security assessment, from €5,700](https://mr-cyber.com/services/internal-network-penetration-testing#ot) - [Smart contract audit, from €4,700](https://mr-cyber.com/services/secure-code-review#web3) - [Automotive security testing, on request](https://mr-cyber.com/services/iot-hardware-penetration-testing#automotive)