Subscriptions & Credits
Credits
Every pentest consumes one credit. You always need at least one available credit to start a pentest.
Credit sources
| Source | How to get | Notes |
|---|---|---|
| One-time purchase | Buy from the checkout page | Recon $49 (free preview, not publicly sold), Audit-Ready $99, Threat-Hunt $299, Adversarial-Depth $699 |
| Subscription | Annual plan paid upfront - all credits issued immediately | See tiers below |
| Voucher | Promotional codes | Enter at checkout or via API |
Canonical slugs: the tier display names map to the slugs used by the API
tierparameter and in URLs -recon(Recon),standard(Audit-Ready),deep(Threat-Hunt), andblitz(Adversarial-Depth).
Credit statuses
| Status | Meaning |
|---|---|
available | Ready to use for a pentest |
scheduled | Reserved for a scheduled pentest |
used | Consumed by a completed pentest |
expired | Expired (unused credits past their expiry date) |
Credit expiry
All credits expire 1 year from the date of purchase. Unused credits are automatically marked as expired after that window. You will receive an email reminder when credits are within 14 days of expiring so you have time to use them.
Subscriptions
Subscriptions are annual plans paid upfront. All your credits are issued immediately when you subscribe. This is the most cost-effective way to maintain continuous pentest coverage.
Subscription tiers
| Tier | Credits/year | Discount | Price/credit | Annual total |
|---|---|---|---|---|
| Audit-Ready | 12 Audit-Ready | 10% off | $89.10 | $1,069.20 |
| Threat-Hunt | 12 Threat-Hunt | 15% off | $254.15 | $3,049.80 |
| Pro | 8 Threat-Hunt + 4 Adversarial-Depth | 20% off | $239.20 / $559.20 | $4,150.40 |
Threat-Hunt is the recommended tier for most teams - it offers a strong balance of coverage and savings.
How subscriptions work
- All subscriptions are billed annually, paid upfront
- All credits are issued immediately at purchase
- Credits expire 1 year from the date of purchase
- You can upgrade or cancel at any time - downgrades take effect at renewal
- Subscriptions are ideal for scheduled pentests and CI/CD integration where you want continuous coverage without manually purchasing credits
Security
How TurboPentest isolates tool execution in per-pentest containers, protects and encrypts your data, and maintains compliance across the platform.
Domain Verification
Verify you own or are authorized to test a domain before starting a pentest - the required first step, using a DNS TXT record or cloud-provider OAuth verification.