Affordable Pentesting Logo

Pricing

Buy pentest credits — no subscriptions, no surprises. Credits never expire.

AI-Driven Automated Pentests

Lightning-fast vulnerability scanning powered by AI

External IP Pentest

AI-driven automated penetration test for external-facing IPs and services

$199/ credit
  • AI-powered vulnerability scanning
  • Nmap network discovery
  • OpenVAS vulnerability assessment
  • Automated findings report
  • Up to 5 targets per scan
  • Export results (PDF/JSON)
  • Credits never expire
Most Popular

Web App Pentest

AI-driven automated penetration test for web applications

$500/ credit
  • AI-powered vulnerability scanning
  • OWASP ZAP web application testing
  • OWASP Top 10 coverage
  • Authenticated scan support
  • Detailed findings report
  • Export results (PDF/JSON)
  • Credits never expire

Pentest+

Web app pentest — up to 5 domains/URLs & 50 IPs

$1,500/ credit
  • 1 Pentest+ credit
  • Web application pentest
  • Up to 5 domains/URLs covered
  • Up to 50 external IPs included
  • Up to 100 API endpoints
  • Up to 10 user roles tested
  • Compliance ready reports
  • Authentication & authorization testing
  • GRC platform integration (Drata, Vanta)
  • Results within 48 hours

Frequently Asked Questions

What does each credit type include?

External IP covers gateways, firewalls, and external infrastructure. Web App covers up to 3 user roles, 20 pages, and 10 API endpoints. Pentest+ is a web application pentest covering up to 5 domains/URLs, 50 external IPs, 100 API endpoints, and up to 10 user roles.

Do pentest credits expire?

No — purchased credits never expire. Use them whenever you're ready.

Can I get a refund?

Unused credits may be refunded within 14 days of purchase. Once a pentest has been dispatched to our systems, credits are non-refundable. Submit a support ticket if you have a billing question.

Do I need to install anything?

No — everything runs in the cloud. Just submit your target and we handle the rest.

How fast do I get results?

Most scans complete within 48 hours. You'll receive a compliance-ready report with detailed findings and remediation guidance.