Pentesting, on demand

No lead times. Low cost. AI powered.  Scoped per asset. Auditor-ready PDF.
For existing customers
$3,500
/ test
Get a Pentest
Auditor-accepted reports
On-demand pentesting
Verified by CREST-certified experts
Web apps · APIs · networks · cloud
Retest after fix included
Findings appear inside your Intruder dashboard
Use pentest credits from Cloud / Pro / Enterprise plans
For non-customers
$4,000
/ test
Get a Pentest
Auditor-accepted reports
On-demand pentesting
Verified by CREST-certified experts
Web apps · APIs · networks · cloud
Retest after fix included
Standalone PDF deliverable
Compliance guarantee

Auditor-accepted, or your money back

If your auditor rejects the report, we refund the test in full - no questions, no fine print.

Continuous security for stretched teams

Become a platform customer for always-on security

see platform plans

Connect your codebase

01

Provide context & credentials

02

Get your audit-ready report

03

Trusted for compliance

Our customers say we’re excellent 4.8 out of 5 based on over 150 reviews from G2
What's included in the free trial?

Our free trial includes all the features of the Cloud plan, along with 5 free licenses which allow you to scan your systems and carry out authenticated web application scans. You can scan 5 targets as many times as you like during the 14 days. If you need more than 5, no problem - just get in touch!

Can I change the number of targets after I've signed up?

Absolutely, you can increase or decrease your licenses as and when you need. A license is used each time you scan a target, and stays used for 30 days. So you just need to make sure you have enough licenses for each 30 day period.

On both annual and monthly plans, increases are pro-rated, and any decreases are credited to your account, up until the next billing period.

How is your pricing calculated?

Our pricing for Essential, Cloud, and Pro consists of a base fee plus a small fee-per-target. Application targets allow you to scan the underlying infrastructure by default. Pricing for Enterprise is quoted separately, as it depends on your specific requirements and the size/complexity of your systems. 

Does your pricing include VAT?

The prices shown are exclusive of VAT.

Does Intruder do authenticated web application security scanning?

Yes, you can carry out authenticated web application scans using Intruder. This includes checks for modern web apps, APIs, and single page applications (SPAs), to learn more, visit here.

Can I use Intruder to meet my security compliance requirements?

Absolutely, we have many customers using our reports to pass compliance with standards such as SOC2, Cyber Essentials, ISO 27001 and many more. In addition, our reports have been used to pass B2B supplier security audits from some of the biggest companies in the world.

What kind of support does Intruder provide?

We pride ourselves on delivering excellent customer service and offer live chat support for all our customers. Enterprise customers also have additional access to dedicated security professionals.

Do you offer any discounts for non-profit organizations?

Yes, we do! If you're a non-profit organization, contact us for more information. 

Is there a minimum time commitment to the service?

When you subscribe to our service you can choose either a monthly rolling plan, which you can cancel at any time, or an annual plan. 

How much does it cost to scan an internal target?

All infrastructure targets are priced the same, whether they are internal, external or cloud. However internal target scanning is only available on our Pro and Enterprise plans.