What does a pentest cost?

There is no standard price for a penetration test (pentest): the cost depends on what is tested, how deeply and with how much prior knowledge. What we always do: after a free intake call you receive a quote with a fixed price for a clearly defined scope. No hourly billing and no surprises afterwards.

Which factors determine the price?

Five factors together determine the price:

• The size of the scope. One web application with ten screens is something different from three applications, an API and an integration with your accounting software.
• The depth. As an indication: for an average web application 16 to 24 hours of testing is a common starting point, for an extensive application 40 hours and for an infrastructure test at least 40 hours.
• The type of test. In a gray box test (with test accounts) no time is lost on guesswork and every hour yields more insight; in a black box test time goes into reconnaissance.
• Your reporting needs. A technical report, a management report or both, and an optional on-site presentation.
• Repetition. An annual pentest of the same environment requires less preparation time than a first test.

Why are there no prices on this page?

Because every environment is different, any amount listed here would mislead you: too high for one organization, too low for another. We prefer to determine the size of the job together first in a short and free intake call. After that you know for sure: one fixed price, up front, in black and white.

What is always included?

Every pentest includes the following as standard:

• A free intake call and a sharply defined scope
• Manual testing by the specialist you spoke with
• Immediate notification of critical findings, already during the test
• A report with a management summary, risk ratings, evidence and concrete remediation advice
• A personal walkthrough of the report
• A retest on request as an extra check after remediation

Determine your price in a call

In a twenty-minute call we map out your situation. After that you receive a quote with a fixed price. No obligation, and you are not tied to anything.

Also read what a pentest involves and how our approach works from intake to retest.

Last updated: October 20, 2026.