Pentest provider comparison · Published by Excession Labs
Compare penetration testing providers on the facts that change the result
What each provider tests, who or what does the testing, published prices with their units, turnaround, retesting and sample reports. Every fact links to the provider's own page and the date we checked it.
- Sorted A–Z, not ranked
- Unknown means "not published"
- No paid placement
- How we compare
15 of 15 providers · sorted A–Z, not ranked · checked up to 9 November 2026
| Provider | Delivery | Web apps | APIs | Cloud | Network | Mobile | AI apps | Published price | Turnaround | Retest | Sample report |
|---|---|---|---|---|---|---|---|---|---|---|---|
| AikidoApplication security platform | automated | Yes | Yes | ? | Yes | Yes | Yes | $4,000 per assessment +1 more | TYPICAL Pentest: same-day results. The AI pentest page also says a… | Free retesting for up to 6 months, including checks for bypasses of… | Public |
| BreachLockPTaaS platform | hybrid | Yes | Yes | Yes | Yes | Yes | ? | Custom quote | Pentests can be scoped and started within 24-48 hours. | Free manual retests: 1 (Standard), 2 (Extended), custom (Extensive).… | on request |
| CobaltPTaaS platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $3,500 per test | Autonomous Pentest: findings in 24 hours. Annual tiers: start within… | Comparison table: free retesting for 6 months (Standard) or 12… | on request |
| EscapeApplication security platform | automated | Yes | Yes | ? | Yes | ? | Yes | Custom quote | Continuous AI pentesting: results in minutes on merge, deploy or… | Open issues are re-checked; external network pentesting is followed… | not published |
| Excession LabsPublisherAI-assisted testing service | hybrid | Yes | Yes | ? | ? | ? | Yes | Custom quote | Not published | Retest of fixed findings is offered; terms are set in each quote. | Public |
| HackerOneCrowdsourced platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | Product page gives no start time or test length. HackerOne docs list… | Retesting is included after remediation. Docs say unlimited retests… | not published |
| HadrianAutonomous testing platform | hybrid | Yes | ? | ? | ? | ? | ? | From EUR 1,250 per test, excluding VAT | Most tests finish within 24 to 48 hours; same-day start possible. | Not published | not published |
| Horizon3.ai (NodeZero)Autonomous testing platform | automated | Yes | Yes | Yes | Yes | ? | ? | $15 per asset, per test (12-month term) +4 more | Not published as a time. WebApp page says tests can be set up… | Findings include fix actions with one-click verify. On Core, Pro and… | not published |
| ParameterAI-assisted testing service | automated | Yes | Yes | ? | ? | ? | ? | Custom quote | First findings in 24 hours; most runs finish the same day they start. | Free re-testing is listed for Single App and inherited by higher… | Public |
| Pen Test PartnersConsultancy | human-led | Yes | Yes | Yes | Yes | Yes | Yes | Custom quote | PTaaS: scoped within minutes and can start immediately; results in… | Not published | not published |
| Secure IdeasConsultancy | human-led | Yes | Yes | ? | Yes | Yes | ? | $8,160 per test (flat fee, starting) +4 more | Testing usually starts two to four weeks after contracting; one to… | Not included by default; retesting is listed as a factor that can… | Public |
| SynackCrowdsourced platform | hybrid | Yes | Yes | Yes | Yes | Yes | Yes | $5,085 per test (starting price) +2 more | Test windows: 4-5 business days (Sara), 5 days (SynackST), 14 days… | Patch verification is listed as included in each product; the… | not published |
| Terra SecurityAI-assisted testing service | hybrid | Yes | ? | ? | Yes | ? | Yes | Custom quote | Vendor says tests drop from 4-6 weeks to 2-4 hours versus… | Not published | not published |
| TurboPentestAI-assisted testing service | automated | Yes | Yes | ? | Yes | ? | Yes | $99 per credit (one pentest) +4 more | All tiers typically complete in a few hours. | A retest is a full new pentest at the same per-target price; no… | Public |
| XBOWAutonomous testing platform | automated | Yes | Yes | ? | ? | ? | ? | Custom quote | First validated findings arrive in hours; testing is continuous or… | Retests after a fix are described as free and unlimited. | not published |
No provider matches every filter. Remove a filter to see more.
"?" means the provider does not say on its public pages. It does not mean "no". Prices use each provider's own unit: a test, a year, a month or credits. Do not compare them as equal units. How we collect and check this data.
What to check before price#
Who does the testing?#
Human-led means named testers do the work, with tools. Automated means software runs the test. Hybrid mixes both: for example an AI agent with human review, or a platform with a pentester. The difference shows up most in business logic and access control.
Does it test what you have?#
Check each surface you need: web app, API, cloud, network, mobile or AI features. A provider that tests networks well may not test multi-tenant SaaS authorization at all.
What does the price buy?#
One test, a year of scans, a number of credits or a monthly subscription. Check what is included: retest, report letter, readout call. Cost guide
Send every provider the same scope#
Quotes only compare when the scope matches. The scoping checklist collects what providers ask for: hosts, roles, API size, environments, deadlines and report needs. It produces a summary you can paste into each request. Nothing leaves your browser.
Disclosure: we sell pentests too#
Excession Labs publishes PentestCompare and also sells penetration testing. We are listed as one provider, under the same rules as everyone else. We are not placed first, and our unknowns say "not published" like any other.
If you want to talk to us about your own test, that is a separate, clearly labeled form: contact Excession Labs. It does not go to the other providers.
Use the dataset#
The full table is available as JSON and CSV under CC BY 4.0, with sources and check dates for every field. Found something wrong or out of date? Send a correction.
Questions
Who publishes PentestCompare?
Excession Labs, which also sells penetration testing and appears in the table as one provider. We disclose this on every page. The table is sorted alphabetically, not ranked, and every profile uses the same fields and rules. Methodology
Why do some cells show a question mark?
A question mark means the provider does not say on its public pages. It does not mean no. We do not guess or estimate missing values. If you know a published source, send a correction.
Can I compare the prices directly?
Only with care. Providers price per test, per year, per month or with credits, and an automated scan is a different product from a manual engagement. Read the unit and what the price covers in each profile. The cost guide explains the pricing models.
How often is the data checked?
Each profile shows the date we last checked the provider's own pages, and every fact links to its source. We recheck when a provider asks for a correction and when we update the guides.
Do providers pay to be listed?
No. Providers do not pay for listings, placement or clicks, and we do not use affiliate links.
Prepare before you talk to providers
Use the scoping checklist to collect what every provider asks for. You get quotes you can compare.