Pentest Pricing: Choose Your Depth
Every tier runs the same 14 Phase 1 tools. Higher tiers add more AI agents and longer analysis time for deeper investigation.
All pentests include a signed attestation letter
Audit-Ready
Get the report your auditor needs.
$99
per target
Threat-Hunt
Hunt threats your audit checklist won't catch.
$299
per target
Adversarial-Depth
Mimic a determined attacker.
$699
per target
Finds nothing? Your next pentest is free. If a pentest surfaces zero actionable findings, we credit you a free re-pentest. You always walk away with real findings or a free redo.
Built and backed by a real offensive-security firm. IntegSec (CISSP, OSCP, ex-IBM X-Force Red and Trustwave SpiderLabs). Every finding is verified by the AI agents with reproducible proof, and each pentest includes a signed attestation letter.
For vendor questionnaires and most SOC 2, ISO 27001, and HIPAA scopes, Audit-Ready ($99) produces the same auditor-ready attestation letter as higher tiers. Higher tiers (Threat-Hunt, Adversarial-Depth) add investigative depth - more agents, more time, more attack chains tried - they don't change what kind of report you get. If your auditor requires “annual penetration testing” without specifying methodology depth, Audit-Ready is sufficient.
1 credit = 1 fully qualified domain name (e.g. app.example.com). Subdomains and the apex are billed separately - testing example.com and app.example.com together uses 2 credits.
All tiers typically complete in a few hours. You'll be notified by email when your report is ready.
Enterprise
Unlimited pentests. Your cloud. Your data.
For security teams that need fleet-wide pentest coverage, data sovereignty, or a dedicated deployment. We deploy and operate a dedicated TurboPentest instance inside your own cloud account; you pay your cloud and Anthropic infrastructure directly. Flat $4,999/month platform fee. Unlimited targets, all depth tiers, SSO, audit log, dedicated Slack.
Annual contract: $49,990/year (save ~$10k vs monthly).
What Each Tier Does
Phase 1 tools always run first. Then AI agents analyze the results.
| Feature | Audit-Ready | Threat-Hunt | Adversarial-Depth |
|---|---|---|---|
| Price | $99 | $299 | $699 |
| AI Agents | 4 | 10 | 20 |
| Agent-Hours | 4 | 20 | 80 |
| Supervisor Agent | ✓ | ✓ | ✓ |
| Dedicated Synthesis | - | ✓ | ✓ |
| Cross-Domain Leads | ✓ | ✓ | ✓ |
| Exploit Chain Analysis | - | ✓ | ✓ |
Audit-Ready
- Price
- $99
- AI Agents
- 4
- Agent-Hours
- 4
- Supervisor Agent
- ✓
- Dedicated Synthesis
- -
- Cross-Domain Leads
- ✓
- Exploit Chain Analysis
- -
Threat-Hunt
- Price
- $299
- AI Agents
- 10
- Agent-Hours
- 20
- Supervisor Agent
- ✓
- Dedicated Synthesis
- ✓
- Cross-Domain Leads
- ✓
- Exploit Chain Analysis
- ✓
Adversarial-Depth
- Price
- $699
- AI Agents
- 20
- Agent-Hours
- 80
- Supervisor Agent
- ✓
- Dedicated Synthesis
- ✓
- Cross-Domain Leads
- ✓
- Exploit Chain Analysis
- ✓
Evaluating against your current pentest provider? See how TurboPentest compares to a human firm →
Volume Discounts
Buy in bulk and save. Applies to any credit tier.
Volume discounts stack with the annual subscription discount.
| Quantity | Discount | Audit-Ready | Threat-Hunt |
|---|---|---|---|
| 1-9 credits | - | $99 | $299 |
| 10+ credits | 10% off | $89.10 | $269.10 |
| 50+ credits | 20% off | $79.20 | $239.20 |
| 100+ credits | 30% off | $69.30 | $209.30 |
- Audit-Ready
- $99.00
- Threat-Hunt
- $299.00
- Audit-Ready
- $89.10
- Threat-Hunt
- $269.10
- Audit-Ready
- $79.20
- Threat-Hunt
- $239.20
- Audit-Ready
- $69.30
- Threat-Hunt
- $209.30
Annual Subscriptions
All subscriptions are annual, paid upfront. All credits are issued immediately.
Subscribe now and save. Prices may increase as we expand to mobile, new platforms, and deeper AI capabilities.
Need a custom mix of tiers?
Build your own quote with volume discounts
Build a QuoteBAA available - no TurboPentest workforce member reviews customer pentest output as part of normal operations. Customer data is not used to train models. See subprocessors for the AI inference path, or contact us to start a BAA.
All subscriptions are annual, paid upfront. All credits are delivered immediately and are valid for 12 months from purchase. No partial refunds.
Re-test Policy
A re-test is a full new pentest at the same per-domain price. No upcharge, no special re-test SKU - buy a new test when you've shipped fixes and want to validate them. Most customers re-test at quarterly cadence; you can re-test as often as you want.
what customers are saying
“Security assessments are often written for IT professionals, but this platform presents complex vulnerabilities in a way that business owners, executives, and non-technical departments can actually understand - making enterprise-level security insights practical and actionable for organizations of any size.”
— Joel Cruzada, Founder, Ethos Holdings Group & Moov Labs
“Awesome product. Tremendous value. We created over 10 stories in our Azure DevOps in minutes with full issue description, steps to reproduce, and resolution objectives for the dev team to implement.”
— Herve Roggero, Managing Partner, Enzo Unified
Pricing FAQ
The Recommended Approach: Agentic Pentesting
Run continuous pentests on every deploy. Review findings from the dashboard, VS Code, Burp Suite Pro, or the MCP server. Chat with AI agents to guide their focus. You and your team make the decisions while AI agents do the heavy lifting. Professional pentesting that used to cost five figures, now starting at $99.
Learn about agentic pentesting →