Request a Penetration Testing Quote

Get a penetration testing quote tailored to your business

Tell us what you need tested and we'll reply within one business day to confirm your scope, then send a fixed-price pen test quote. External network testing starts from £2,400 and web application testing from £3,600, for organisations across the UK, Europe and the US.
Start your quote Book a scoping call

Accreditations and memberships

CREST member company, accredited for penetration testing CREST-accredited penetration testing Cyber Essentials certified UK Cyber Security Council member
Request a penetration testing quote from UK-based consultants
Quote form

Tell us what you need tested

These questions cover what our consultants need to prepare an accurate, fixed-price proposal. Select the services you're interested in and add any detail you have.
Select one or more

Pentest Quote Guide

What information should you provide when requesting a pentest quote?

To provide an accurate quote we need to understand your environment. The questions below are a guide, and a scoping call is the quickest way through them if you'd rather talk.

Business Context

  • What is the driving decision to procure a penetration test?
  • Has a penetration test been conducted previously? If so, when was the last engagement and were there any significant findings?
  • Is there a preferred timeframe or hard deadline for the engagement?
  • Are there any exclusions for testing approach, methodology, or specific targets?
  • Is the engagement driven by a compliance requirement? See our compliance testing information for ISO 27001, PCI DSS, Cyber Essentials Plus, and SOC 2 specifics.

External Network Pentest

  • How many hostnames, IP addresses, or IP ranges are in scope?
  • How many systems are expected to be actively exposing services?
  • Which domain names are in scope?
  • Are there specific services or hosts of particular concern?
  • Is cloud infrastructure included, and if so, which provider?

Internal Network Pentest

  • How can access to the network be provided: on-site, VPN, or jump box?
  • How many workstations and servers are in scope?
  • Is there any specific testing required for compliance purposes, such as testing the CDE for PCI DSS?
  • Are there any sensitive systems that require additional care during testing?
  • Do you require a build review of a sample workstation and/or server during the assessment?

Web Application Testing

  • How many applications will be in scope for testing?
  • What is the complexity and/or functionality of the application(s)?
  • Will testing be performed against the production, staging, or other environment?
  • Will authenticated testing be required? If so, how many user roles or permission levels will be included?
  • Is authentication handled by a third-party identity provider or in-house?
  • Is there any functionality that is particularly sensitive or business-critical that warrants specific focus?

API Pentesting

  • Approximately how many API endpoints are in scope?
  • Is the API RESTful, GraphQL, or another format?
  • Is API documentation available, for example a Swagger or Postman collection?
  • Does the API share authentication with the web application or does it have its own?

Our Process

What happens after you request a quote

01

Submit your requirements

Use the quote form or book a scoping call. Tell us what you need tested, any compliance requirements, and your preferred timeframe. The more context you can provide, the more accurate your quote will be.
02

Confirm scope and receive a fixed-price proposal

A member of our technical team replies within one business day to confirm your scope, usually with a short questionnaire or a call. You then receive a written proposal setting out the approach, deliverables and fixed cost.
03

Schedule your testing

Once you're happy with the proposal, we'll schedule a call to discuss the rules of engagement and any access requirements, and plan a testing window that fits your schedule.
04

Testing, reporting & debrief

Testing is conducted by an experienced consultant with direct communication throughout. Your report is delivered within 2 business days of testing completion, followed by a debrief call with your team.

Why Exploitr

Why choose Exploitr

Choosing Exploitr means working directly with an experienced consultant, with a fixed price agreed before any work begins.

For the full list of deliverables included with every engagement, see our pricing guide.

Consultant-led, never outsourced

Every engagement is led end-to-end by an OSCP and OSCE-certified consultant, assigned at scoping and your point of contact through to the debrief.

Fixed price, agreed up front

Your price is fixed and agreed before testing begins, rather than billed by the day, with no surprise overruns if the work takes longer than expected.

Direct access throughout

You have a direct line to your consultant during the engagement, and critical findings are raised with you immediately rather than held back for the final report.

Exploitr platform included

Included with every engagement at no extra cost, the Exploitr platform gives you a live view of findings as they're discovered, so you can start fixing before the report arrives.

Common Questions

Pentest quote: frequently asked questions

How penetration testing is priced, scoped and delivered, answered before you request a quote.

Your quote will include: proposed methodology, scope of work, estimated testing duration, the testing deliverables (for example an executive report, vulnerability/technical report, retesting), and a fixed cost. There are no hidden fees.

For a full breakdown of how we approach every engagement, see our penetration testing methodology page.

Use the form above to request an external penetration testing quote. Include your IP ranges or subnet size, whether cloud infrastructure is in scope, and your preferred testing window.

We reply within one business day to confirm your scope, then send a fixed-price proposal. External network testing starts from £2,400.

Use the form above to request an internal penetration testing quote. Include the number of workstations and servers in scope, how access will be provided (on-site, VPN, or jump box), and whether Active Directory or other directory services are in scope.

We reply within one business day to confirm your scope, then send a fixed-price proposal. Internal network testing starts from £3,600.

Yes, we can scope internal and external network penetration testing together as a single engagement.

External network pentests typically take 2 to 5 days, and internal network pentests 3 to 8 days. Your scope may vary depending on your environment and architecture.

None whatsoever. All enquiries are treated confidentially and you're under no obligation to proceed.

We reply to every quote request within one business day to confirm your scope, usually with a short questionnaire or a call. Your fixed-price proposal follows once we have the detail needed to price it accurately, so the more you can tell us upfront, the sooner it arrives.

If you have an urgent requirement, book a scoping meeting and we can give you indicative costs on the call.

That's absolutely fine. If you're not sure what type of testing you need, or if you have a unique environment that doesn't fit neatly into a standard category, just provide as much information as you can about your requirements and concerns.

We can work with you to understand your needs and recommend the most appropriate testing scope for your business. For an instant indicative range first, try our penetration testing cost calculator.

Yes. We work with organisations across the UK, Europe and the US. Testing is delivered remotely or on-site, and we can provide a fixed-price proposal for your environment regardless of location.

Prefer to talk it through first?

Book a free 30-minute scoping call and we'll help you figure out what testing you need, what's in scope, and what a fixed-price engagement would look like for your environment.
Book a scoping call