Introduction

TurboPentest is an automated penetration testing platform that runs 15 professional security tools against your web applications and infrastructure. It combines network reconnaissance, web application testing, and optionally source code analysis into a single pentest with unified findings.

What you get

Each pentest produces:

• Findings - Vulnerabilities ranked by severity (critical, high, medium, low, info) with CVSS scores, proof of exploit, and remediation guidance
• Retest commands - Docker one-liners to verify each fix locally
• PDF report - Executive summary, methodology, and detailed findings for stakeholders
• Attestation letter - Formal letter confirming the pentest was performed, with blockchain verification on Base L2
• Attack surface map - Visual map of discovered assets and entry points
• Threat model - STRIDE-based analysis of your application

Black box vs white box

• Black box - 11 tools test your application externally (network, web app, SSL, WAF detection, etc.)
• White box - All black box tools plus 3 code analysis tools (SAST, SCA, secret detection) that require GitHub repository access

Pricing

TurboPentest uses a credit system. Each pentest consumes one credit. Credits can be purchased individually (starting at $49 for Recon tier) or via annual subscriptions for continuous coverage at volume discounts of 10-30%. Credits can also be transferred between users.

See Pricing for the full schedule.