Hiring guide
How to compare penetration testing providers before you sign
Most penetration testing providers describe themselves in the same words. So the useful comparison is not the sales page but five facts you can check in writing before anyone starts.
- Signed scope before testing
- Fixed price agreed in writing
- OWASP and PTES methods
Five questions for penetration testing providers
So send the same questions to every shortlisted firm. Then compare the written answers side by side.
- Who will test, and will that person write the report?
- Is the fee fixed, or billed by the hour or day?
- Which method is followed, for example the Penetration Testing Execution Standard?
- Is every finding validated by hand?
- Is a retest included after you fix the issues?
How penetration testing providers price the work
Pricing also shapes behaviour. For example, an hourly rate rewards a longer engagement, while a fixed fee rewards a clear scope. Therefore ask how each provider prices, not only how much.
| Model | What it rewards | Risk for you |
|---|---|---|
| Hourly or daily | More time on the clock. | The total moves during the project. |
| Fixed fee | A precise scope up front. | Low, if the scope is written well. |
| Subscription | Volume over depth. | Testing may stay shallow. |
Score your penetration testing providers
Tick each item a provider has confirmed in writing. Compare the totals.
Your result appears here as you tick, so you can see what is still open.
Red flags among penetration testing providers
Some warning signs are easy to spot once you know them. Also, any one of them justifies a follow-up question.
- A price far below $4,000, which usually means a scan with a cover page
- No named tester before the contract
- No request for written authorisation
- A sample report that lists tool output without routes
What the report should prove
A report is only worth the fee if your engineers can act on it. So expect reproducible attack chains, a prioritised remediation plan and a written debrief from the person who tested. In addition, the retest should show which fixes worked.
Where Apex Offensive fits
Full engagements run from $35,000 to $120,000, and the floor is $25,000. The bounded Focused Exposure Review starts at $4,500. Its fee is credited in full against a full engagement commissioned within ninety days. We confirm one fixed number after the scoping brief, and testing usually starts within 48 hours of signed authorisation.
Questions about penetration testing providers
How many penetration testing providers should we compare?
Three is usually enough, provided each answers the same written questions.
Are larger penetration testing providers safer?
Not automatically. However, ask who actually tests, because large firms often staff juniors.
Should the cheapest provider win?
Only if the scope and depth match. Otherwise the cheapest quote often covers less work.
Do penetration testing providers need our authorisation?
Yes. A reputable provider will refuse to start without it.
Related guides
Get one fixed number to compare
Send a short description of what you need tested. We reply with a written scope and one fixed fee, so you can compare us against other penetration testing providers on equal terms.
Get a fixed price