Pentest cost calculator
Build a dollar budget for your next penetration test. Tick each target type, set its size, and watch the tester-days and price range adjust.
Size your test, see a range
This tool gives a planning figure, not a quote. It uses the same inputs we use when we scope work: what is in scope, how big each part is and how you want it tested. When the number looks right, send us the details and we will turn it into a fixed price.
Tester-days multiplied by a day rate
Almost every penetration test is priced the same way. First we work out how many days a qualified tester needs to cover the scope properly. Then we multiply that by a day rate for the region and the type of work.
The calculator follows that logic. Each test type has a low and high day count for each size band. Your choices add up to a total effort range, which is then priced at the lower and upper ends of the regional rate.
Because the effort range is wide on purpose, the price range is too. A short scoping call is what narrows it.
Worked example · Illustrative
Why two similar-looking apps can cost very different amounts
Roles and tenants
Each extra user type multiplies the access-control checks. Multi-tenant platforms need cross-tenant testing on top.
Endpoints and workflows
More API routes, file uploads, payment steps or approval chains mean more places for logic to break.
Level of access given
Black-box testing spends days on discovery. Credentials, docs and source code let testers go deeper in the same time.
Environment
A stable staging copy with test data is fastest. Production-only testing needs tighter windows and more care.
Reporting needs
Mapping results to a framework, or writing for an auditor, adds reporting time per test.
Start date
Starting within two weeks means rearranging schedules, which the urgent option reflects.
What the price covers
- Scoping call and written rules of engagement
- Manual testing by experienced testers, supported by tooling
- Same-day notice of any critical finding
- Report with executive summary, CVSS 4.0 ratings, evidence and fixes
- A debrief call with your engineers
- Free retest of fixed findings and an attestation letter
Why a fixed-price proposal follows
An online estimate cannot see your app. It does not know that half your endpoints are read-only, or that one admin screen hides a complex approval flow. We ask a few questions, look at the scope and then commit to a single price.
That price does not move if testing takes longer than we planned. If you add scope later, we agree the change in writing before doing the work.
For more on sizing, read how to scope a penetration test and how long a pentest takes.
Ready to find your risks before attackers do?
Tell us what you need tested or monitored. A senior consultant replies within one business day with a scoped, fixed-price proposal.
- Fixed-price proposal
- Reply within 1 business day
- NDA on request