Let’s get the awkward question out of the way first: how much will it cost? It depends on what you’re testing. But we can tell you what it depends on, and once you send us a few details, we’ll put a real number in writing.
Sunvak Boreal sends quotes that spell out what’s being tested, how, for how long, and what you get at the end. If something isn’t included, we say so. If the scope changes partway through, we call you before the invoice does.
What Does a Penetration Testing Quote Include?
A quote should answer your questions before you think to ask them. Ours covers:
- What’s in scope. The applications, APIs, networks, cloud environments, or systems we’ll test, and the ones we won’t touch.
- How we’ll test. Black box, grey box, or white box, with or without a logged-in user.
- Effort and timing. How many days of testing, when we can start, and when you’ll hear back.
- Standards. OWASP, NIST SP 800-115, or whatever your auditor or customer has asked for.
- The report. What’s in it, who it’s written for, and whether there’s a plain-English summary for non-technical readers.
- Retesting. Whether we check your fixes, and whether that’s included or an extra.
- Ground rules. Testing windows, who to call, and what happens if we find something serious halfway through.
If a quote in your inbox skips any of these, ask about it before you sign.
What Affects the Price of a Penetration Test?
A company that quotes a flat price without asking you anything is guessing. Here’s what really moves the number.
How big and complicated it is
A five-page marketing site is a small job. A SaaS platform with several user roles and 200 API endpoints is not. More features, roles, integrations, and IP addresses mean more hours.
What kind of test it is
Different tests need different skills. The usual ones are:
- Web application penetration testing
- API security testing
- Network penetration testing (internal or external)
- Cloud configuration review (AWS, Azure, GCP)
- Active Directory security assessment
- Mobile application testing
How deep we go
A scanner can finish in an afternoon. A person who tries to abuse your business logic, get around your authorization checks, and chain small weaknesses into a serious one takes longer. That person also finds what scanners miss, which is why the extra cost usually pays for itself.
What you share with us
If you give us test accounts, documentation, or source code, we spend our time hunting for real problems. If we start from scratch, part of the budget goes on working out how your system fits together.
Compliance requirements
If the test has to satisfy PCI DSS, SOC 2, ISO 27001, HIPAA, or one specific customer, the scope and the report need to fit. That can change the effort and what we hand over.
Your deadline
Need it next week? We may be able to help, but rushed work can affect both availability and price. A few weeks’ notice usually gets you a better deal.
Retesting
Some providers include a retest after you fix things. Others bill for it. We’ll tell you which applies before you commit.
What We Need to Give You an Accurate Quote
You don’t need a polished brief. Rough answers and a short call are enough. It helps if you can tell us:
- What you want tested: web app, API, network, cloud, or a mix
- Roughly how big it is: user roles, main features, endpoints, IP ranges, or cloud accounts
- Why you’re testing: a customer asked, an audit is coming, you’re launching something, or you want some peace of mind
- Any framework or standard the test has to meet
- When you’d like results
- Whether you can share test accounts, documentation, or architecture diagrams
- What’s off limits, like production systems or third-party services
Don’t know some of this yet? That’s normal. Figuring it out with you is part of our job.
How Our Quote Process Works
- You send us the basics. A short form or an email is plenty.
- We have a quick call. Usually 20 to 30 minutes, to understand what you need and what worries you most.
- We write down the scope. Targets, test type, approach, and boundaries, confirmed in writing.
- You get your quote. Scope, method, timeline, deliverables, and price, all in one place.
- We talk it through. If something’s unclear, or you need to trim the scope to fit a budget, we’ll go over the options with you.
- We schedule the test. Once you’re comfortable, we agree on dates and contacts and get started.
What You Get After the Test
A pen test is only as useful as what you can do with the results. Every engagement includes:
- A short executive summary for people who don’t live in security
- A detailed technical report explaining each finding
- Risk ratings, so you know what to fix first
- Evidence and steps to reproduce every issue, so your developers aren’t left guessing
- Practical advice on how to fix things
- A walkthrough of the results with your team, if you want one
- Retesting to confirm your fixes, as agreed in your quote
Fixed Price or Time-Based?
When the scope is clear, we can usually offer a fixed price, so you know the total before we start. For bigger or fuzzier projects, a time-based or retainer arrangement can work better, especially if your team ships often and wants testing that keeps pace. We’ll recommend what fits and tell you why.
How to Compare Penetration Testing Quotes
If you’re collecting quotes, lay them side by side and ask:
- Is the scope really the same? A cheaper quote often covers less.
- How much is done by a person? Some “penetration tests” are mostly a scanner with a logo on it.
- Who’s doing the testing? Ask about their experience and certifications.
- What does the report look like? Ask for a sample.
- Is retesting included?
- What else could I be charged for? Watch for fees on reporting, travel, or after-hours work.
- Will it satisfy my auditor or customer? Better to check now than find out later.
The cheapest quote isn’t automatically the best deal, and the priciest isn’t automatically the best test. You want a scope that matches your risk and a report your team can act on.
Who Asks Us for a Quote?
We regularly work with:
- SaaS and technology companies
- Financial services organizations
- Healthcare providers and health tech companies
- E-commerce businesses
- Enterprises with complex networks
- Cloud-first and startup teams
- Companies answering security requirements from enterprise customers
- Organizations preparing for SOC 2, ISO 27001, PCI DSS, or HIPAA
When to Ask for a Quote
Get in touch if you’re:
- Preparing for an audit or certification
- Launching a new application or major release
- Working through a customer’s security questionnaire
- Moving systems to the cloud
- Making big infrastructure changes
- Recovering from a security incident
- Coming up on your annual penetration test
Good testers book up fast. If there’s an audit deadline, ask a few weeks ahead.
Why Sunvak Boreal?
We try to be straightforward and useful.
- Manual, expert-led testing. Tools help, but people find the serious problems.
- Clear scoping. You’ll know what’s being tested and what isn’t.
- Pricing that makes sense. The quote shows what you’re paying for.
- Reports people can use. Developers and executives can both follow them.
- Help after the test. We’ll help you fix issues, and we can confirm you did.
- Wide coverage. Web, API, network, cloud, Active Directory, and compliance-driven testing in one place.
Get Your Penetration Testing Quote
Tell us what needs testing and we’ll come back with a clear scope and an honest price. Not sure where to start? We’ll help you work out what’s worth testing first.
[Request a Penetration Testing Quote]
FAQs
How much does a penetration test cost?
It depends on scope, complexity, type of test, depth, and timeline. A small web app costs far less to test than a large platform or a full internal network. The quickest way to get a real number is to send us your scope.
How long does it take to get a quote?
Once we have the basics, we can usually reply within a few business days. Complex environments may need a short call first.
Is the quote free?
Yes. Scoping and quoting are free, with no obligation.
What if I don’t know exactly what needs testing?
Plenty of people don’t. We’ll help you find the systems that carry the most risk and suggest a sensible scope.
Can I change the scope after I get the quote?
Yes. We can adjust it to fit your priorities or budget, and we’ll show you how the price changes.
Is the price fixed?
For well-defined scopes, yes. If the scope changes during testing, we’ll talk to you first.
Is retesting included?
We’ll spell that out in your quote so there are no surprises.
Will the report satisfy my auditor or customer?
Reports can be aligned with frameworks like SOC 2, ISO 27001, PCI DSS, and HIPAA. Tell us your requirements when you ask for the quote so we can scope for them.
Do you test production systems?
We can, with agreed rules and safeguards, or we can test a staging environment instead. We’ll talk through what suits you best.
Can you test cloud environments?
Yes. AWS, Microsoft Azure, and Google Cloud can all be included.
What’s the difference between a vulnerability scan and a penetration test?
A scan automatically checks for known weaknesses. A penetration test uses skilled people to find, chain, and safely exploit weaknesses so you can see what an attacker could actually do. Quotes reflect that difference.