How Much Does a Penetration Test Cost? What Decides the Price
Penetration test prices vary a lot, because the work varies a lot. A single small website and a large application with five user roles are different jobs, even though both are called a pen test.
We do not publish a price list, because scope changes the figure. This page explains what moves it, so you can ask for a quote that is firm and fair.
Our main page for this service: Web Application Testing.
What changes the price
The main factors:
- How many applications, APIs and servers are in scope
- How many user roles there are, because each one needs testing
- How deep you want the test to go
- Whether we test a live system or a staging copy
- Whether a retest after your fixes is included
- What the report must contain, such as a summary for a customer
What to tell a tester to get a firm quote
The address of each application, a short description of what it does, the user roles, and any rules from a customer or regulator. The more exact this is, the less the quote has to guess.
How to compare two quotes
Check that both cover the same scope. Ask whether the retest is included, whether a person tests by hand or the quote is mostly a scan, and what the report looks like. A lower figure that leaves out the retest is not lower.
Frequently asked questions
Can you give a price without seeing the system?
Not a firm one. We can give a range once we know the number of applications and roles, and a fixed figure once we have scoped it.
Is the retest included?
We state this in the written quote, so you can compare it with others.
Do you charge for scoping?
A short call to understand what you run is part of giving you a quote.
Do you test overseas systems?
Yes, remotely and in English. We agree the scope and the timing in writing first.
Get a written quote
Tell us what you run and who uses it. Call +91-86194 70448 or email contact@gtsltd.in. We work remotely, in English, with businesses in India and abroad.