Request a Penetration Testing Quote

Get a penetration testing quote tailored to your business

We work with organisations across the UK, with all testing delivered remotely or on-site. Tell us what you need tested and we'll respond with a fixed-price proposal within one business day.

External network and infrastructure testing projects starting from £1,800, with web application testing from £2,700. Prefer to talk it through first? Book a 20-minute scoping call and we'll be happy to help.

Accreditations and memberships

CREST Pathway member Cyber Essentials certified UK Cyber Security Council member
Request a penetration testing quote from UK-based consultants

Request a Custom Penetration Testing Quote

The questions below cover what our consultants typically need to prepare an accurate, fixed-price proposal. If you have an urgent requirement or would prefer to discuss your needs directly, please book a 20-minute scoping call with our team.

You can use our cost calculator to get an instant indicative range before submitting, or view the full pricing guide for worked examples.

Select one or more

Pentest Quote Guide

What information should you provide when requesting a pentest quote?

To provide an accurate and contextual quote for testing we'll need to understand more about your environment. Schedule a call with us for quick and easy scoping experience, where we can give you indicative costs directly on the call.

Business Context

  • What is the driving decision to procure a penetration test?
  • Has a penetration test been conducted previously? If so, when was the last engagement and were there any significant findings?
  • Is there a preferred timeframe or hard deadline for the engagement?
  • Are there any exclusions for testing approach, methodology, or specific targets?
  • Is the engagement driven by a compliance requirement? See our compliance testing information for ISO 27001, PCI DSS, Cyber Essentials Plus, and SOC 2 specifics.

External Network Pentest

  • How many hostnames, IP addresses, or IP ranges are in scope?
  • How many systems are expected to be actively exposing services?
  • Which domain names are in scope?
  • Are there specific services or hosts of particular concern?
  • Is cloud infrastructure included, and if so, which provider?

Internal Network Pentest

  • How can access to the network be provided: on-site, VPN, or jump box?
  • How many workstations and servers are in scope?
  • Is there any specific testing required for compliance purposes, such as testing the CDE for PCI DSS?
  • Are there any sensitive systems that require additional care during testing?
  • Do you require a build review of a sample workstation and/or server during the assessment?

Web Application Testing

  • How many applications will be in scope for testing?
  • What is the complexity and/or functionality of the application(s)?
  • Will testing be performed against the production, staging, or other environment?
  • Will authenticated testing be required? If so, how many user roles or permission levels will be included?
  • Is authentication handled by a third-party identity provider or in-house?
  • Is there any functionality that is particularly sensitive or business-critical that warrants specific focus?

API Pentesting

  • Approximately how many API endpoints are in scope?
  • Is the API RESTful, GraphQL, or another format?
  • Is API documentation available, for example a Swagger or Postman collection?
  • Does the API share authentication with the web application or does it have its own?

Our Process

What happens after you request a quote

01

Submit your requirements

Use the quote form or book a scoping call. Tell us what you need tested, any compliance requirements, and your preferred timeframe. The more context you can provide, the more accurate your quote will be.
02

Receive a fixed-price proposal

Our team will review your requirements, typically within one business day, and provide a written, fixed-price proposal. No obligation to proceed.
03

Schedule your testing

Once you're happy with the proposal, we'll schedule a call to discuss the rules of engagement and any access requirements, and plan a testing window that fits your schedule.
04

Testing, reporting & debrief

Testing is conducted by an experienced consultant with direct communication throughout. Your report is delivered within 2 business days of testing completion, followed by a debrief call with your team.

Why Exploitr

Why Choose Exploitr

Choosing Exploitr means working directly with the consultant who tests your systems, with a fixed price agreed before any work begins. For the full list of deliverables included with every engagement, see our pricing guide.

  • Consultant-led, never outsourced

    Every engagement is delivered end-to-end by an OSCP and OSCE-certified penetration testing consultant. Nothing is subcontracted, and you work directly with the person testing your systems.

  • Fixed price, agreed up front

    Your price is fixed and agreed before testing begins. No day rates, no countdown, and no surprise overruns if the work takes longer than expected.

  • A quote within one business day

    Submit your requirements and we'll respond with a written, fixed-price proposal within one business day, with no obligation to proceed.

  • Direct access throughout

    You have a direct line to your consultant during the engagement, and critical findings are raised with you immediately rather than held back for the final report.

  • Scoped to your environment

    We don't sell checkbox testing. Scope is shaped around your environment, your compliance drivers, and the functionality your business depends on.

Common Questions

Pentest quote - frequently asked questions

Everything you need to know about how penetration testing is priced, scoped, and delivered before you request a quote.

Your quote will include: proposed methodology, scope of work, estimated testing duration, the testing deliverables (for example an executive report, vulnerability/technical report, retesting), and a fixed cost. There are no hidden fees.

For a full breakdown of how we approach every engagement, see our penetration testing methodology page.

Use the form above to request an external penetration testing quote. Include your IP ranges or subnet size, whether cloud infrastructure is in scope, and your preferred testing window.

We respond with a fixed-price proposal within one business day. External network testing starts from £1,800.

Use the form above to request an internal penetration testing quote. Include the number of workstations and servers in scope, how access will be provided (on-site, VPN, or jump box), and whether Active Directory or other directory services are in scope.

We respond with a fixed-price proposal within one business day. Internal network testing starts from £2,850.

Yes, we can provide a scope for testing both internal and external network penetration testing bundled together.

The typical time required for external network pentests is around 2-7 days, and internal network pentests are between 3-10 days. Your custom scope may vary depending upon your environment and architecture.

None whatsoever. All enquiries are treated confidentially and you're under no obligation to proceed.

We aim to respond to all quotation requests within one business day. If you have an urgent requirement, please book a scoping call and we can provide indicative costs directly on the call.

That's absolutely fine. If you're not sure what type of testing you need, or if you have a unique environment that doesn't fit neatly into a standard category, just provide as much information as you can about your requirements and concerns.

We can work with you to understand your needs and recommend the most appropriate testing scope for your business.

Yes. We work with organisations across the US and Europe. All testing is delivered remotely or on-site, and we can provide a fixed-price proposal for your environment regardless of location.

Prefer to talk it through first?

Book a free 20-minute scoping call and we'll help you figure out what testing you need, what's in scope, and what a fixed-price engagement would look like for your environment.
Book a scoping call