Skip to content
Pentesys
Pricing

Securitytestingpricedaroundyourscope,notyourheadcount

Fixed-fee engagements and continuous testing subscriptions. Every plan pairs AI-assisted testing with validation from qualified consultants.

Scope your engagement online

Want to scope a penetration test or red teaming engagement? Use the Mirage Portal scoping tool to build your scope, see indicative pricing and book a follow-up with our team.

Start scoping
Bundles

Credit bundles built around your maturity

Every bundle is priced in credits at £125 per credit — mix Surface, Validate and Adversary modules to match your scope.

Essentials

Mirage SurfaceMirage Validate
Yearly
ItemCreditsCost
Mirage Surface1 Domain6£750
Mirage SurfaceVulnerability Scan up to 10 Assets8£1,000
Mirage Validate AIBrochure Website8£1,000
Mirage ValidateHuman Validation16£2,000
Bundle total38 credits£4,750

Full bundle value: 38 credits / £4,750

Discuss this bundle

Continuous

Mirage SurfaceMirage Validate
Continuous
ItemCreditsCost
Mirage Surface3 Domains64£8,000
Mirage SurfaceVulnerability Scan up to 25 Assets44£5,500
Mirage Validate AIBrochure Website44£5,500
Mirage ValidateHuman Validation48£6,000
Bundle total200 credits£25,000

Full bundle value: 200 credits / £25,000

Discuss this bundle

Enterprise

Mirage SurfaceMirage ValidateMirage Adversary
Continuous
ItemCreditsCost
Mirage Surface10 Domains128£16,000
Mirage SurfaceUnlimited Assets88£11,000
Mirage Validate AIBrochure Website88£11,000
Mirage ValidateHuman Validation100£12,500
Mirage AdversaryRed & Purple Teaming180£22,500
Bundle total584 credits£73,000

Full bundle value: 584 credits / £73,000

Discuss this bundle

Mirage Adversary

Mirage Adversary
One-off
ItemCreditsCost
Mirage AdversaryRed & Purple Teaming (single engagement)180£22,500
Engagement total180 credits£22,500

Select the cadence that matches your programme.

Discuss adversary options
Mirage Adversary
Bi-annual
ItemCreditsCost
Mirage AdversaryRed & Purple Teaming (every half year)340£42,500
Engagement total340 credits£42,500

Select the cadence that matches your programme.

Discuss adversary options
Mirage Adversary
Quarterly
ItemCreditsCost
Mirage AdversaryRed & Purple Teaming (every quarter)650£81,250
Engagement total650 credits£81,250

Select the cadence that matches your programme.

Discuss adversary options
Mirage Assure

Mirage Assure — Fixed compliance costs

Cyber Essentials and Cyber Essentials Plus are priced by organisation size. Credits are rounded up to the nearest whole credit at £125 each.

Cyber Essentials

Organisation sizeCreditsCost
Micro (0-9 Employees)4£500
Small (10-49 Employees)5£625
Medium (50-249 Employees)6£750
Large (250+ Employees)7£875
Pre-Assessment Review5£625

Cyber Essentials Plus

Organisation sizeCreditsCost
Micro (0-9 Employees)12£1,500
Small (10-49 Employees)21£2,625
Medium (50-249 Employees)23£2,875
Large (250+ Employees)34£4,250

Flexible payment options

Choose the payment approach that works for your budget. Pay upfront and secure a discounted rate, or spread the cost evenly across 12 months to preserve cash flow.

Upfront

Pay in full today

Best value with a discounted credit rate.

Spread

12 monthly payments

Same total cost divided over the year.

All prices exclude VAT and are subject to UK VAT where applicable. 1 credit = £125.

Compare

What's included in each plan

Every plan combines automation with human validation — the difference is coverage, cadence and depth.

CapabilityEssentialsContinuousEnterprise
Manual consultant testing
AI-assisted continuous testing
Mirage Portal access
Attack surface monitoring
Unlimited retesting
Red teaming & adversary simulation
Compliance framework mapping
Named delivery team
Credits

Buy services with pre-approved credits at a discounted rate

Credits give you the flexibility to lock in budget upfront and draw down Pentesys services as you need them — across testing, PTaaS, red teaming and compliance engagements.

1 credit = £125

Pre-approved, discounted rate

  • One credit pool covers all Pentesys products and services
  • Draw down credits as scopes are confirmed — no expiry surprises
  • Discounted pricing compared with standard fixed-fee engagements
  • Ideal for teams running continuous testing or multi-workstream programmes

Pay upfront for a discount, or spread over 12 months

Choose the option that fits your budget. Upfront payment unlocks the best rate; monthly instalments keep cash flow predictable.

Discuss credit pricing
Pricing FAQ

Questions about cost and scope

How is a penetration test priced?

Pricing is based on scope and effort — the number of applications, hosts, user roles and the depth of testing required. We confirm a fixed price after a short scoping call, with no hidden day-rate extras.

Is retesting included?

Yes. Every engagement includes remediation verification. Continuous and Enterprise customers get unlimited retesting as fixes are deployed.

Can we start small and scale up?

Most clients start with a single scoped test and move to a continuous programme once they see the findings in the portal. Spend from an initial engagement can be credited toward a subscription.

Do you offer Cyber Essentials certification pricing?

Cyber Essentials and Cyber Essentials Plus are fixed-fee based on organisation size. Get in touch and we'll confirm the exact cost in one call.

Can I buy Pentesys services with pre-approved credits?

Yes. All Pentesys products can be purchased with pre-approved credits at a discounted rate. One credit equates to £125, giving you a flexible way to budget and draw down services across penetration testing, PTaaS, red teaming and compliance engagements.

Can we spread the cost over time?

Yes. For qualifying annual programmes you can choose to pay upfront for a discounted rate, or spread the cost over 12 monthly instalments. Spreading the cost requires a signed contract and is subject to approval.

Do you accept payment through Stripe?

Yes. Card payments are processed securely through Stripe. We can also arrange bank transfers for larger annual programmes.

Can we manage everything through the portal?

Absolutely. The Mirage Portal is self-service for scoping, scheduling, viewing findings, downloading reports, tracking remediation and managing your subscription.

Can you provide invoices?

Yes. We provide itemised invoices for every engagement and subscription. Annual programmes can be invoiced in advance or monthly, depending on your chosen payment terms.

Is Pentesys VAT registered?

Yes. Pentesys is VAT registered and VAT will be applied to invoices where applicable. VAT registration details are shown on every invoice.

Are there cancellation fees?

Cancellation fees may apply depending on the engagement type and how close to the start date the cancellation occurs. Terms are set out in the statement of work or contract.

Save time and book a call with us

Enterprise-grade penetration testing, built around your business

CREST-registered testing delivered through a flexible PTaaS model — designed to fit your environment, risk profile and internal teams.