How much does a pentest cost?
Scope drives price. Four drivers decide 90% of any honest quote.
The 4 drivers
- Apps + endpoints: 1 app vs app+API vs multi-app program.
- Roles + permissions: 2 roles vs 10 roles with tenant isolation.
- Auth complexity: email/password vs SSO, MFA, biometrics.
- Network size: 1 external IP vs /24 + internal AD.
Our fixed bands
Scout from $499 (one surface), Strike from $699 (app+API), Perimeter custom up to $999. Fixed in writing, 1 retest included — full pricing.
Red flags
Hourly with no cap, scanner report priced as pentest, no retest, no RoE. Ask for sample findings + methodology mapping.