pentestcompare.com

# PentestCompare

> A sourced comparison of penetration testing providers: testing scope, human or automated delivery, published prices, turnaround, retesting and sample reports.

PentestCompare is published by Excession Labs. Excession Labs also sells penetration testing. Its row in the main table is labeled "Publisher-owned", and it is left out of every filtered list, comparison and shortlist. Provider facts come from each provider's own public pages and carry the date we checked them. Unknown values say "Not published".

Every page is also available as Markdown: add `index.md` to the page URL.

## Key pages

- [Pentest provider comparisons: alternatives and head-to-head pages](https://pentestcompare.com/compare/index.md): Pentest provider comparisons: head-to-head and alternatives pages for Cobalt, HackerOne, XBOW, Horizon3 and Synack, with prices and retest terms checked 9 Nov 2026.
- [Synack alternatives: five pentest providers compared](https://pentestcompare.com/compare/synack-alternatives/index.md): Synack lists $5,085, $10,283 and $27,120 starting prices per test. Of 5 alternatives, Cobalt ($3,500) and Horizon3 ($15 per asset) publish. Checked 9 Nov 2026.
- [XBOW vs Cobalt: autonomous testing or credit-based PTaaS](https://pentestcompare.com/compare/xbow-vs-cobalt/index.md): XBOW publishes no price; Cobalt lists $3,500 per autonomous test and quote-only credit tiers. Scope, retests and reports compared. Checked 9 Nov 2026.
- [CMMC penetration testing companies: compared](https://pentestcompare.com/compliance/cmmc/index.md): CMMC penetration testing companies whose own pages mention CMMC, with what Level 2 and Level 3 say about pentests, CUI handling questions and price drivers.
- [DORA penetration testing companies](https://pentestcompare.com/compliance/dora/index.md): DORA penetration testing providers that mention DORA on their own pages, A to Z, with sources and dates, plus TLPT versus yearly testing in plain words.
- [FedRAMP penetration testing companies: compared](https://pentestcompare.com/compliance/fedramp/index.md): FedRAMP penetration testing companies in one sourced table, A to Z, with the 3PAO rule, what each provider states and six questions to put to a provider.
- [GDPR penetration testing companies: compared](https://pentestcompare.com/compliance/gdpr/index.md): GDPR penetration testing companies from one sourced dataset, A to Z. Article 32 in plain words, the Article 28 contract and eight data handling questions.
- [HIPAA penetration testing companies: compared](https://pentestcompare.com/compliance/hipaa/index.md): HIPAA penetration testing companies whose own pages mention HIPAA, with BAA, PHI and evidence questions and what the Security Rule says about testing.
- [ISO 27001 penetration testing companies: compared](https://pentestcompare.com/compliance/iso-27001/index.md): ISO 27001 penetration testing companies compared from their own pages. The standard names no pentest, so the page covers Annex A and what auditors check.
- [PCI DSS penetration testing companies: compared](https://pentestcompare.com/compliance/pci-dss/index.md): PCI DSS penetration testing companies in one sourced table, A to Z, with a segmentation checklist, the independence rule and six checks for a quote.
- [SOC 2 penetration testing companies: providers and evidence to request](https://pentestcompare.com/compliance/soc-2/index.md): SOC 2 penetration testing companies compared on sample reports, credentials and retest terms, with the AICPA wording and the evidence to request from each.
- [Talk to Excession Labs, the publisher](https://pentestcompare.com/contact/index.md): This form goes to Excession Labs, which publishes PentestCompare and sells penetration testing. It does not reach the other providers in the table.
- [Developers and AI agents](https://pentestcompare.com/developers/index.md): Machine-readable access to pentestcompare.com: OpenAPI description, API catalog, Markdown versions of every page, llms.txt and the rules for AI agents.
- [Penetration testing provider directory: by service, framework and country](https://pentestcompare.com/directory/index.md): Penetration testing providers grouped by service, compliance framework, country and list. Every listing uses facts from the provider's own pages, with dates.
- [Pentest glossary: 60+ terms buyers meet](https://pentestcompare.com/glossary/index.md): A pentest glossary with 60+ terms from scope and severity to BOLA, PTaaS and prompt injection, each in one to three plain sentences with links to deeper guides.
- [Pentest buyer guides: one buying question per guide](https://pentestcompare.com/guides/index.md): Buyer guides for penetration testing: cost and pricing models, providers for startups and SOC 2, AI vs human testing, PTaaS, and how to judge sample reports.
- [Compare penetration testing providers](https://pentestcompare.com/index.md): Compare penetration testing companies on scope, human or automated delivery, published prices and units, turnaround, retesting and sample reports. Sourced and dated.
- [List your company on PentestCompare](https://pentestcompare.com/list-your-company/index.md): Submit a penetration testing company for a free listing on PentestCompare. We check each fact on the company's own public pages and date the check.
- [AI penetration testing companies: 16 providers compared, sourced](https://pentestcompare.com/lists/ai-penetration-testing-companies/index.md): AI penetration testing companies compared: delivery model, scope, published prices with units, turnaround claims, retest terms and sample reports for 16 providers.
- [AI red teaming companies: who tests LLM apps and agents](https://pentestcompare.com/lists/ai-red-teaming-companies/index.md): AI red teaming companies that state AI app or LLM testing on their own pages: 43 providers, 12 read in detail, with price, retest and sample report columns, Nov 2026.
- [CREST penetration testing companies: checked list, Nov 2026](https://pentestcompare.com/lists/crest-accredited-penetration-testing-companies/index.md): Penetration testing companies that state CREST status on their own pages, with what the accreditation covers, five checks on a claim and the limits of the list.
- [PTaaS providers: platforms compared](https://pentestcompare.com/lists/ptaas-providers/index.md): PTaaS providers compared from their own pages: delivery, published price, retest terms and sample reports, plus what PTaaS means in a contract. Checked Nov 2026.
- [Penetration testing companies in Canada](https://pentestcompare.com/locations/canada/index.md): Penetration testing companies headquartered in Canada, A to Z, with published prices, CREST claims and sample reports from their own pages, and six checks.
- [Penetration testing companies in Germany: sourced list](https://pentestcompare.com/locations/germany/index.md): Penetration testing companies headquartered in Germany, A to Z, with sources, plus how we assign a country and six checks on report language and data location.
- [Penetration testing UK: companies compared, CREST and CHECK](https://pentestcompare.com/locations/united-kingdom/index.md): Penetration testing UK companies from one sourced dataset, A to Z, matched by HQ country. CHECK explained from NCSC text, plus seven questions for providers.
- [Penetration testing companies in the USA: sourced list](https://pentestcompare.com/locations/united-states/index.md): Penetration testing companies in the USA, listed A to Z from the PentestCompare dataset with published prices, sample reports and sources, checked 9 November 2026.
- [How PentestCompare works: publisher, method and corrections](https://pentestcompare.com/methodology/index.md): Who publishes PentestCompare, how the 66 providers were chosen, what each field means, how facts are checked, the limits of the data, and how to send a correction.
- [Aikido pricing: pentest prices, what is extra and what to ask](https://pentestcompare.com/pricing/aikido/index.md): Aikido pricing for pentests as of 9 November 2026: $4,000 per assessment for TYPICAL, $50 to $30,000+ for Rightsized, retests, turnaround claims and what to ask.
- [Hadrian pricing: Nova tests from EUR 1,250 and what is not published](https://pentestcompare.com/pricing/hadrian/index.md): Hadrian pricing as of 9 November 2026: Nova agentic pentests from EUR 1,250 per test excluding VAT, bundles and Atlas unpublished, plus questions to ask before you buy.
- [Penetration testing pricing: published prices from 22 providers](https://pentestcompare.com/pricing/index.md): Pentest prices published by 22 of 66 providers, from $99 per pentest credit to $27,120 per test, with unit, source and check date (9-12 Nov 2026). Budget check.
- [Pentest-Tools.com pricing: plans, asset tiers and what is billed separately](https://pentestcompare.com/pricing/pentest-tools/index.md): Pentest-Tools.com pricing as of 9 November 2026: Free, NetScan from $96, AppScan from $140 and Exploit from $190 per month, asset tiers and separate service fees.
- [Secure Ideas pricing: flat fees, hourly rate and credits](https://pentestcompare.com/pricing/secure-ideas/index.md): Secure Ideas pricing as of 9 November 2026: starting flat fees from $8,160, a $340 hourly rate, a $2,520 PETaaS credit, and what the quote leaves open.
- [Synack pricing: starting prices per test and how credits work](https://pentestcompare.com/pricing/synack/index.md): Synack pricing as of 9 November 2026: three starting prices per test, credits that expire after one year, an unpriced platform fee and the test windows.
- [Privacy notice](https://pentestcompare.com/privacy/index.md): What PentestCompare collects when you visit or send a request, why, where it is stored, how long we keep it and how to contact Excession Labs about your data.
- [Pentest research data: prices, market, disclosure gaps, headers](https://pentestcompare.com/research/index.md): Open pentest research data on 66 providers: pricing index, market snapshot, what providers do not publish, and their own security headers. CSV, method, dates.
- [API penetration testing companies: who states API scope](https://pentestcompare.com/services/api-penetration-testing/index.md): API penetration testing companies compared from their own pages: API scope, published price, retest terms and sample reports, with six questions to ask first.
- [Cloud penetration testing companies for AWS, Azure, GCP](https://pentestcompare.com/services/cloud-penetration-testing/index.md): Cloud penetration testing companies from one sourced dataset, A to Z, with what AWS, Microsoft and Google allow, what to scope and what to ask each provider.
- [IoT penetration testing companies: compared](https://pentestcompare.com/services/iot-penetration-testing/index.md): IoT penetration testing companies from one sourced dataset, A to Z. See what a device test covers, the ETSI EN 303 645 baseline and what to ask each provider.
- [Mobile app penetration testing companies](https://pentestcompare.com/services/mobile-app-penetration-testing/index.md): Mobile app penetration testing companies from their own pages, A to Z, with price, retest and sample report columns, plus OWASP MASVS scoping questions.
- [Network penetration testing companies: compared by scope](https://pentestcompare.com/services/network-penetration-testing/index.md): Network penetration testing services compared from provider pages: internal vs external scope, segmentation, Active Directory, price drivers and questions to ask.
- [OT and ICS penetration testing companies: compared](https://pentestcompare.com/services/ot-ics-penetration-testing/index.md): ICS and OT penetration testing companies from one sourced dataset, A to Z. Six safety questions, the NIST and IEC 62443 references and what to scope first.
- [Physical penetration testing companies: who offers it](https://pentestcompare.com/services/physical-penetration-testing/index.md): Physical penetration testing companies whose own pages state the service, with authorization letter, scope rules, price drivers and questions to ask before a site test.
- [Red teaming companies: compared, with sources](https://pentestcompare.com/services/red-teaming/index.md): Red team services compared from each provider's own pages, with the NIST definition, rules of engagement to agree, price drivers and seven questions to ask first.
- [Social engineering testing companies: compared](https://pentestcompare.com/services/social-engineering-testing/index.md): Social engineering penetration testing providers compared from their own pages, with rules of engagement, phishing and vishing scope, price drivers and questions.
- [Source code review services](https://pentestcompare.com/services/source-code-review/index.md): Source code review providers from their own pages, A to Z, with price, retest and sample report columns, and how manual review differs from SAST tools.
- [Vulnerability assessment services: providers compared](https://pentestcompare.com/services/vulnerability-assessment/index.md): Vulnerability assessment services in one sourced table, A to Z, with price, retest and report facts, plus six questions to ask before you buy a scan or review.
- [Web application penetration testing companies compared](https://pentestcompare.com/services/web-application-penetration-testing/index.md): Web application penetration testing companies in one sourced table, A to Z, with price, retest and sample report facts plus six questions to ask each one.
- [Wireless penetration testing companies: compared](https://pentestcompare.com/services/wireless-penetration-testing/index.md): Wireless penetration testing providers compared from their own pages: on-site work, SSID and guest network segmentation, rogue access points, price drivers.
- [Terms of use](https://pentestcompare.com/terms/index.md): The terms for using pentestcompare.com: content, free tools, data, AI agent and API access, and how security testing is agreed. Operated by Excession Labs.
- [Penetration test scoping checklist](https://pentestcompare.com/tools/scoping-checklist/index.md): An interactive checklist of what pentest providers ask before they quote: scope, roles, API size, environments, limits and report needs. Copy the summary.

## Research

- [Pentest pricing index 2026: medians by unit from 22 providers](https://pentestcompare.com/research/pentest-pricing-index-2026/index.md): Pentest pricing index from 81 published price rows of 22 providers, grouped by unit. Median per test is $5,000 (9 providers). Every row sourced, CSV included.
- [PTaaS market snapshot 2026: 66 pentest providers by model](https://pentestcompare.com/research/pentest-provider-market-2026/index.md): PTaaS market snapshot from 66 pentest providers: 32 human-led, 19 hybrid, 15 automated. Only 22 publish prices and 14 a public sample report. Counts, method, CSV.
- [Security headers of 66 penetration testing providers' own websites](https://pentestcompare.com/research/pentest-provider-security-headers/index.md): We ran our header checker once on the homepages of 66 pentest providers. Of 65 graded, 69% pass HSTS and 3% pass CSP. Counts, method and raw data.
- [What 66 penetration testing providers do not publish](https://pentestcompare.com/research/what-pentest-providers-do-not-publish/index.md): Counts from 66 pentest providers: 44 publish no price, 45 no sample report, 28 say nothing on retests, 35 list no credential. Method, CSV and what to ask.

## Providers

- [Penetration testing providers: 66 profiles, sourced and dated](https://pentestcompare.com/providers/index.md): Profiles of penetration testing providers: what each tests, who does the testing, published prices, turnaround, retesting, credentials and sources.
- [7ASecurity: pentest scope, pricing and delivery](https://pentestcompare.com/providers/7asecurity/index.md): 7ASecurity at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [A-LIGN: pentest scope, pricing and delivery](https://pentestcompare.com/providers/a-lign/index.md): A-LIGN at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Aikido: pentest scope, pricing and delivery](https://pentestcompare.com/providers/aikido/index.md): Aikido at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Astra Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/astra-security/index.md): Astra Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Bishop Fox: pentest scope, pricing and delivery](https://pentestcompare.com/providers/bishop-fox/index.md): Bishop Fox at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Black Hills Information Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/black-hills-information-security/index.md): Black Hills Information Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [BreachLock: pentest scope, pricing and delivery](https://pentestcompare.com/providers/breachlock/index.md): BreachLock at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Bridewell: pentest scope, pricing and delivery](https://pentestcompare.com/providers/bridewell/index.md): Bridewell at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Bugcrowd: pentest scope, pricing and delivery](https://pentestcompare.com/providers/bugcrowd/index.md): Bugcrowd at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Claranet: pentest scope, pricing and delivery](https://pentestcompare.com/providers/claranet/index.md): Claranet at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Cobalt: pentest scope, pricing and delivery](https://pentestcompare.com/providers/cobalt/index.md): Cobalt at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Compass Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/compass-security/index.md): Compass Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Cure53: pentest scope, pricing and delivery](https://pentestcompare.com/providers/cure53/index.md): Cure53 at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Cyberis (Cyberis Reply): pentest scope, pricing and delivery](https://pentestcompare.com/providers/cyberis/index.md): Cyberis (Cyberis Reply) at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [CYBRI: pentest scope, pricing and delivery](https://pentestcompare.com/providers/cybri/index.md): CYBRI at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [DeepStrike: pentest scope, pricing and delivery](https://pentestcompare.com/providers/deepstrike/index.md): DeepStrike at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Detectify: pentest scope, pricing and delivery](https://pentestcompare.com/providers/detectify/index.md): Detectify at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Doyensec: pentest scope, pricing and delivery](https://pentestcompare.com/providers/doyensec/index.md): Doyensec at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Equixly: pentest scope, pricing and delivery](https://pentestcompare.com/providers/equixly/index.md): Equixly at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Escape: pentest scope, pricing and delivery](https://pentestcompare.com/providers/escape/index.md): Escape at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Excession Labs: pentest scope, pricing and delivery](https://pentestcompare.com/providers/excession-labs/index.md): Excession Labs at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Giskard: pentest scope, pricing and delivery](https://pentestcompare.com/providers/giskard/index.md): Giskard at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [HackerOne: pentest scope, pricing and delivery](https://pentestcompare.com/providers/hackerone/index.md): HackerOne at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Hadrian: pentest scope, pricing and delivery](https://pentestcompare.com/providers/hadrian/index.md): Hadrian at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Halo Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/halo-security/index.md): Halo Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Horizon3.ai (NodeZero): pentest scope, pricing and delivery](https://pentestcompare.com/providers/horizon3/index.md): Horizon3.ai (NodeZero) at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Include Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/include-security/index.md): Include Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Integrity360: pentest scope, pricing and delivery](https://pentestcompare.com/providers/integrity360/index.md): Integrity360 at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Intruder: pentest scope, pricing and delivery](https://pentestcompare.com/providers/intruder/index.md): Intruder at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [IOActive: pentest scope, pricing and delivery](https://pentestcompare.com/providers/ioactive/index.md): IOActive at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [JUMPSEC: pentest scope, pricing and delivery](https://pentestcompare.com/providers/jumpsec/index.md): JUMPSEC at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Lakera: pentest scope, pricing and delivery](https://pentestcompare.com/providers/lakera/index.md): Lakera at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [LRQA (Nettitude): pentest scope, pricing and delivery](https://pentestcompare.com/providers/lrqa-nettitude/index.md): LRQA (Nettitude) at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Mindgard: pentest scope, pricing and delivery](https://pentestcompare.com/providers/mindgard/index.md): Mindgard at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [NCC Group: pentest scope, pricing and delivery](https://pentestcompare.com/providers/ncc-group/index.md): NCC Group at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [NetSPI: pentest scope, pricing and delivery](https://pentestcompare.com/providers/netspi/index.md): NetSPI at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Novee: pentest scope, pricing and delivery](https://pentestcompare.com/providers/novee/index.md): Novee at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Outpost24: pentest scope, pricing and delivery](https://pentestcompare.com/providers/outpost24/index.md): Outpost24 at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Packetlabs: pentest scope, pricing and delivery](https://pentestcompare.com/providers/packetlabs/index.md): Packetlabs at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Parameter: pentest scope, pricing and delivery](https://pentestcompare.com/providers/parameter/index.md): Parameter at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Payatu: pentest scope, pricing and delivery](https://pentestcompare.com/providers/payatu/index.md): Payatu at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Pen Test Partners: pentest scope, pricing and delivery](https://pentestcompare.com/providers/pen-test-partners/index.md): Pen Test Partners at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Penligent: pentest scope, pricing and delivery](https://pentestcompare.com/providers/penligent/index.md): Penligent at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Pentera: pentest scope, pricing and delivery](https://pentestcompare.com/providers/pentera/index.md): Pentera at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Pentest People: pentest scope, pricing and delivery](https://pentestcompare.com/providers/pentest-people/index.md): Pentest People at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Pentest-Tools.com: pentest scope, pricing and delivery](https://pentestcompare.com/providers/pentest-tools/index.md): Pentest-Tools.com at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Penti: pentest scope, pricing and delivery](https://pentestcompare.com/providers/penti/index.md): Penti at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Prescient Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/prescient-security/index.md): Prescient Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Raxis: pentest scope, pricing and delivery](https://pentestcompare.com/providers/raxis/index.md): Raxis at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Rhino Security Labs: pentest scope, pricing and delivery](https://pentestcompare.com/providers/rhino-security-labs/index.md): Rhino Security Labs at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [RunSybil: pentest scope, pricing and delivery](https://pentestcompare.com/providers/runsybil/index.md): RunSybil at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Schellman: pentest scope, pricing and delivery](https://pentestcompare.com/providers/schellman/index.md): Schellman at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Secure Ideas: pentest scope, pricing and delivery](https://pentestcompare.com/providers/secure-ideas/index.md): Secure Ideas at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Securitum: pentest scope, pricing and delivery](https://pentestcompare.com/providers/securitum/index.md): Securitum at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Software Secured: pentest scope, pricing and delivery](https://pentestcompare.com/providers/software-secured/index.md): Software Secured at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [SPLX: pentest scope, pricing and delivery](https://pentestcompare.com/providers/splx/index.md): SPLX at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Stingrai: pentest scope, pricing and delivery](https://pentestcompare.com/providers/stingrai/index.md): Stingrai at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Strix: pentest scope, pricing and delivery](https://pentestcompare.com/providers/strix/index.md): Strix at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Synack: pentest scope, pricing and delivery](https://pentestcompare.com/providers/synack/index.md): Synack at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [SySS: pentest scope, pricing and delivery](https://pentestcompare.com/providers/syss/index.md): SySS at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Terra Security: pentest scope, pricing and delivery](https://pentestcompare.com/providers/terra-security/index.md): Terra Security at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [TrustedSec: pentest scope, pricing and delivery](https://pentestcompare.com/providers/trustedsec/index.md): TrustedSec at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [TurboPentest: pentest scope, pricing and delivery](https://pentestcompare.com/providers/turbopentest/index.md): TurboPentest at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [usd AG: pentest scope, pricing and delivery](https://pentestcompare.com/providers/usd-ag/index.md): usd AG at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [Vumetric: pentest scope, pricing and delivery](https://pentestcompare.com/providers/vumetric/index.md): Vumetric at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [XBOW: pentest scope, pricing and delivery](https://pentestcompare.com/providers/xbow/index.md): XBOW at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.
- [ZeroThreat: pentest scope, pricing and delivery](https://pentestcompare.com/providers/zerothreat/index.md): ZeroThreat at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

## Guides

- [Astra Security alternatives for pentesting: prices, units and retests](https://pentestcompare.com/compare/astra-security-alternatives/index.md): Astra Security pentest plans cost $2,999, $5,999 and from $9,999 per target per year. Five alternatives also publish prices. Checked 9 Nov 2026.
- [BreachLock alternatives for pentesting: prices, delivery models and retests](https://pentestcompare.com/compare/breachlock-alternatives/index.md): BreachLock quotes every tier. Of 4 alternatives, Cobalt ($3,500 per test) and Astra ($2,999 per year) publish prices. Checked 9 Nov 2026.
- [Bugcrowd alternatives for pentests, grouped by delivery model](https://pentestcompare.com/compare/bugcrowd-alternatives/index.md): Bugcrowd and HackerOne publish no pentest price. Cobalt lists $3,500 per test and Synack $5,085 to $27,120 starting. BreachLock quotes. Checked 9 Nov 2026.
- [Cobalt alternatives for penetration testing](https://pentestcompare.com/compare/cobalt-alternatives/index.md): Cobalt lists one price, $3,500 per autonomous test; its human tiers are quote-only credits. 3 of 6 alternatives publish prices. Checked 9 Nov 2026.
- [Cobalt vs HackerOne for penetration testing](https://pentestcompare.com/compare/cobalt-vs-hackerone/index.md): Cobalt lists $3,500 per autonomous pentest; HackerOne lists no pentest price. Retests: free 6 to 12 months vs unlimited in 30 or 90 days. Checked 9 Nov 2026.
- [HackerOne alternatives for pentests: prices, retests and competitors](https://pentestcompare.com/compare/hackerone-pentest-alternatives/index.md): HackerOne publishes no pentest price. 4 of 8 alternatives do: Stingrai US$3,000, Cobalt $3,500, Synack from $5,085, Secure Ideas $8,160+. Checked 9 Nov 2026.
- [HackerOne vs Bugcrowd for buying a pentest](https://pentestcompare.com/compare/hackerone-vs-bugcrowd/index.md): Neither HackerOne nor Bugcrowd publishes a pentest price. Bugcrowd tests launch in under 72 hours; HackerOne retests run 30 or 90 days. Checked 9 Nov 2026.
- [Horizon3 alternatives: NodeZero rivals by price unit](https://pentestcompare.com/compare/horizon3-alternatives/index.md): NodeZero lists $15 per asset per test, $50 to $85 per asset a year and $10,000 per app. Alternatives by delivery type and unit. Checked 9 Nov 2026.
- [Intruder.io alternatives](https://pentestcompare.com/compare/intruder-alternatives/index.md): Intruder.io lists an AI pentest at $3,500 per test. All 6 alternatives publish prices, in units from per test to per year. Checked 9 Nov 2026.
- [Intruder vs Detectify: pentest or scanner pricing compared](https://pentestcompare.com/compare/intruder-vs-detectify/index.md): Intruder lists $3,500 per AI pentest; Detectify lists EUR 0 to 15,000 per year for scanning. Units, scope and retests compared. Checked 9 Nov 2026.
- [NodeZero vs Pentera](https://pentestcompare.com/compare/nodezero-vs-pentera/index.md): NodeZero lists $15 per asset per test and $50 to $85 per asset a year; Pentera publishes no price. Scope and retests compared. Checked 9 Nov 2026.
- [Pentera alternatives for network, web and human-led pentesting](https://pentestcompare.com/compare/pentera-alternatives/index.md): Pentera lists no price. Of 6 alternatives, Horizon3.ai ($15 to $85 per asset) and Pentest-Tools.com (from $96 per month) publish prices. Checked 9 Nov 2026.
- [Software Secured alternatives for penetration testing](https://pentestcompare.com/compare/software-secured-alternatives/index.md): Software Secured lists starts-at prices of $5,400 to $21,400 with no billing unit and 3 retest rounds. 4 of 6 alternatives publish a price. Nov 2026.
- [Synack vs Cobalt for penetration testing](https://pentestcompare.com/compare/synack-vs-cobalt/index.md): Synack lists $5,085, $10,283 and $27,120 starting per test; Cobalt lists $3,500 per autonomous test and credit tiers. Checked 9 Nov 2026.
- [XBOW alternatives for autonomous and AI-assisted pentesting](https://pentestcompare.com/compare/xbow-alternatives/index.md): XBOW publishes no price or unit. Of 8 alternatives, 5 list prices, such as TurboPentest from $99 per credit and Intruder at $3,500 per test. Checked 9 Nov 2026.
- [XBOW vs Horizon3 NodeZero](https://pentestcompare.com/compare/xbow-vs-horizon3/index.md): XBOW publishes no price or unit. NodeZero lists $15 per asset per test, $50 to $85 per asset a year and $10,000 per app. Checked 9 Nov 2026.
- [AI vs human pentesting: what 66 providers say they do](https://pentestcompare.com/guides/ai-vs-human-pentesting/index.md): AI vs human pentesting across 66 providers: which are human-led, hybrid or automated by their own words, plus the tradeoffs, benchmark evidence and where people matter.
- [Automated penetration testing tools: four categories, named](https://pentestcompare.com/guides/automated-pentesting-tools/index.md): Automated penetration testing tools in four types: autonomous platforms, AI pentest services, AI-assisted DAST and open-source agents, with sourced prices.
- [Best penetration testing companies: a sourced shortlist by need](https://pentestcompare.com/guides/best-penetration-testing-companies/index.md): Best penetration testing companies by need, not by rank: 66 providers checked 9 Nov 2026, listed A to Z with delivery type, published prices and sources.
- [Bug bounty vs pentest: how to choose](https://pentestcompare.com/guides/bug-bounty-vs-pentest/index.md): Bug bounty vs pentest compared on payment, tester count, coverage, audit use and retests, with quotes from Bugcrowd and HackerOne docs, checked Nov 2026.
- [How to judge a pentest provider by its sample report](https://pentestcompare.com/guides/judge-a-pentest-provider-by-its-sample-report/index.md): Nine signals to check in a pentest sample report before you buy, plus which of 66 providers publish one, with links and the date we checked them.
- [Penetration testing cost: list prices from 22 of 66 providers](https://pentestcompare.com/guides/penetration-testing-cost/index.md): Penetration testing cost: 22 of 66 providers list prices, $99 to $27,120 per test, checked 9 to 12 Nov 2026. Why units differ and what a quote should include.
- [Penetration testing for startups: how to choose a provider](https://pentestcompare.com/guides/pentest-providers-for-startups/index.md): Penetration testing for startups: which of 66 providers fits a customer review, an audit or a launch, with tradeoffs and the evidence to ask for before you buy.
- [Pentest vs vulnerability scan: which one do you need?](https://pentestcompare.com/guides/pentest-vs-vulnerability-scan/index.md): Pen test vs vulnerability scan: what each does, how NIST defines them, how PCI DSS 11.3 (scans) differs from 11.4 (pentests), and a table to pick one.
- [Penetration testing as a service (PTaaS) vs traditional pentesting](https://pentestcompare.com/guides/ptaas-vs-traditional-pentesting/index.md): Penetration testing as a service explained: how PTaaS platforms, consultancies and automated tools differ in contract, price and retesting, with named providers.
- [Questions to ask a pentest provider before you sign](https://pentestcompare.com/guides/questions-to-ask-a-pentest-provider/index.md): 24 questions to ask a pentest provider, grouped by scope, people, method, report, retest and contract. Each has the reason to ask and a good answer signal.
- [Astra pentest pricing: plans, per-year units and re-scans](https://pentestcompare.com/pricing/astra-security/index.md): Astra pentest pricing as listed on 9 November 2026: Auto $2,999, Expert $5,999 and Enterprise from $9,999 per year, per target, with re-scans and conflicts.
- [Cobalt pentest pricing: what Cobalt.io publishes](https://pentestcompare.com/pricing/cobalt/index.md): Cobalt.io pentest pricing as published on 9 November 2026: one $3,500 autonomous test, annual credit tiers with no price, retest terms and a quote checklist.
- [Detectify pricing: plans, units and extras](https://pentestcompare.com/pricing/detectify/index.md): Detectify pricing as published on 9 November 2026: four annual tiers from EUR 0 to EUR 15,000, a EUR 500 PCI ASV add-on, what is extra, and a quote checklist.
- [Horizon3 NodeZero pricing](https://pentestcompare.com/pricing/horizon3/index.md): Horizon3 NodeZero pricing from the vendor's list: Flex $15 per asset per test, Core $50, Pro $65, Elite $85 per asset per year, WebApp $10,000 per app.
- [Intruder pricing for AI pentests](https://pentestcompare.com/pricing/intruder/index.md): Intruder.io pentest pricing from its own pages: $3,500 per AI web app test, $12,000 for four, $4,000 on the product page. Which page says what, and what is missing.
- [TurboPentest pricing: credits, targets and limits](https://pentestcompare.com/pricing/turbopentest/index.md): TurboPentest pricing as of 9 November 2026: $99, $299 and $699 per credit, $99 per month, $49,990 per year. What one target means, retests and limits.

## Related Excession Labs sites

- [penetrationtestservices.com](https://penetrationtestservices.com/llms.txt): Web application, API and SaaS penetration testing
- [aipentestservices.com](https://aipentestservices.com/llms.txt): AI-assisted penetration testing with human review
- [airedteamingservices.com](https://airedteamingservices.com/llms.txt): Security assessments of LLM apps, RAG and AI agents

## Optional

- [Full text of this site](https://pentestcompare.com/llms-full.txt)