The cost of a penetration test depends on how much work the agreed scope takes, so two quotes are only comparable when they describe the same work. A useful quote starts with an assessment boundary. The number of systems matters, but access requirements, application roles, operational constraints, and reporting needs also affect the work.
What drives the price
- The size of the scope. How many internet-facing addresses and hostnames, internal hosts or endpoints, applications and APIs are included.
- External, internal or both. An external test looks at what is reachable from the internet; an internal test starts from inside the network. Each is a separate body of work.
- Applications and user roles. Web applications and APIs take longer when there are several user roles, complex workflows or business logic to test, and when test accounts and data need to be prepared.
- Testing windows and constraints. Testing outside business hours, systems that need particular care, and change-freeze periods shape the schedule.
- Depth. Whether the work stops at identifying weaknesses or goes on to show what an attacker could reach from them, within the rules of engagement.
- Reporting and follow-up. An executive summary, technical findings with evidence, a results walkthrough and retesting of fixed issues each add work.
Prepare the scope
Bring an inventory of the systems you want assessed, the reason for testing, any deadlines, and the people who can authorize the engagement. Identify systems that must be excluded or handled with particular care.
Compare deliverables
Check whether the proposal covers an executive summary, technical findings, remediation guidance, a results walkthrough, and follow-up testing. Ask about assumptions and what happens if the scope changes.
Penetration test or vulnerability scan?
An automated vulnerability scan and a penetration test are priced differently because they are different work. A scan lists known issues; a penetration test has a person verify what can actually be exploited and what it leads to. More on the difference.
Agree before starting
Fortress provides proposals based on the agreed work. The proposal defines scope, fees, timeline, and responsibilities so you can review the engagement before committing. To get a quote, send the scope through the contact form or book a 30-minute scoping call.