Pentest pricing, in plain numbers.
Every rate is on this page. Pick what you want tested, choose how deep, and work out your own total. Starts at $75, with no sales call and no six-week wait.
Start with what you want tested
Four test types, each with its own depth. A type charges one base per order at the depth you chose for it, however many targets or tests that order covers, and picking more than one type brings the bases down.
External
Your internet-facing targets, tested from our infrastructure.
Targets price on the external curve.
Internal
Your internal network, tested through an appliance you run on it.
Targets price on the internal curve, a flat step above external.
Cloud
One cloud account. A control-plane posture review of identity, exposure, data protection, and detection gaps.
One flat base at any depth: it buys the posture pass. Add the VMs and apps inside as targets, and individual resources as flat add-ins, and your chosen depth applies to those.
Domain
One network range. Active Directory enumeration, certificate services, and the coercion surface.
One base for the range, higher at Deep. Add hosts in it as targets on the internal curve.
Base, by test type and depth
| Test type | Quick | Vulnerability | Standard | Deep |
|---|---|---|---|---|
| External | $60 | $350 | $750 | $1,200 |
| Internal | $80 | $450 | $850 | $1,300 |
| Cloud | $750(Full read-only always) | (Discovered resource tests) | ||
| Domain | — | — | $750 | $1,200 |
Pick one depth per row, not one for the whole order: Deep across your internet-facing estate and Standard inside is a single order. Each type's targets then ride their own volume curve at their own depth. Where a base does not move with depth, the depth you pick governs the targets and resources inside that test rather than the base. A dash means that test type is not offered at that depth.
Combine test types and pay less
Ten internet-facing and ten internal targets at Standard Pentest: $1,900 in one order, against $2,300 bought separately. Combining is cheaper by construction, never the other way round.
Then choose how deep
Every tier runs the same engine across your network and web apps, internal or internet-facing. The deeper you go, the further it takes it, from finding and validating vulnerabilities to safely exploiting and chaining them.
Add authenticated testing
Give Prober credentials and it tests behind the login: session handling, access controls, and the pages a signed-in user reaches.
$50 on the base and $10/target on Vulnerability, $100 and $10/target on Standard, included in Deep.
Per-target rates, published
Your first 10 targets are half the full rate, and volume brings you back to half price by target 101. The whole table is here.
| Tier | 1-10 Half price | 11-25 Full rate | 26-50 | 51-100 | 101+ Half price |
|---|---|---|---|---|---|
| Quick Testflat | $15 | $15 | $15 | $15 | $15 |
| Vulnerability Assessment | $25 | $50 | $42 | $33 | $25 |
| Standard Pentest | $30 | $60 | $50 | $40 | $30 |
| Deep Pentest | $50 | $100 | $84 | $67 | $50 |
Rates are per target, external. Between the two ends the rate steps down bracket by bracket. Quick Test takes no volume bracket, at a flat $15 per target.
What you pay per target, all in
Base included. One base per test type per order, however many targets or tests it covers.
A retest comes with every target
Fix something and prove it. Every target you test carries one discounted retest, good for 90 days after that test finishes. A retest is the per-target rate with no base, and no volume bracket on top.
| Tier | External | Internal |
|---|---|---|
| Quick | $15 | $20 |
| Vulnerability | $25 | $35 |
| Standard | $30 | $40 |
| Deep | $50 | $60 |
Per target. A target that failed or came back unqualified is re-run free, in place, and does not spend the retest.
Price your order
The same function that charges your order. Pick a depth for each test type: Deep across your internet-facing estate and Standard inside is one order, one payment.
- External baseStandard Pentest
- $750
- 10 internet-facing targets, Standard10 x $30
- $300
Runs as 1 test, launched when you are ready.
Every target carries one discounted retest for 90 days after its test finishes, at its own depth's rate and with no base.
On a monthly schedule this order is $840 with annual billing.
Save with a testing schedule
Put testing on a cadence and pay less for every order, then run one on demand between cycles whenever something ships.
Monthly
A test a month on your targets.
Save 10%, or 20% with annual billing.
Quarterly
A test each quarter, the cadence auditors expect.
Save 8%, or 15% with annual billing.
The discount applies to the whole order, base and targets alike.
Want a human in the loop? Add expert validation from $750, or a fully human-led pentest.
Still deciding which depth fits?
Read the FAQ →Ready to test?
Point Prober at a target and get a complete pentest back, on demand. No quote, no wait.