What does a pentest cost?

What sets the price

• The scope: how many domains, pages and features are included.
• Logins and user roles: each role is tested separately, for example customer and administrator.
• APIs and integrations: more entry points mean more to test.
• The depth: an external check takes less time than an in-depth test.
• Add-ons: a source code review comes on top.

What is included in the price?

With me, the report and a retest of fixed findings are always included. In Extended and Complete, a walkthrough of the report in a meeting is included too. You do not pay extra to have the findings explained.

Cheap scan or a real test?

An automated scan is cheap, but often produces a long list of false alarms and misses the flaws that require understanding your site. The price of a pentest should be weighed against what a data leak, a hacked webshop or a fake invoice in your name would cost.

How to get a price

Write briefly what your website does and what worries you. I will suggest a package and send a quote with a fixed scope. If you are unsure about the package, start with Basic and put your questions in the message.