Penetration Testing Pricing:
Starter, Growth & Enterprise

Yes. PenScan enforces ownership verification via DNS TXT records before any scan begins — you can only scan domains you demonstrably control. Users must also acknowledge a legal disclaimer confirming authorisation before initiating a scan. This makes PenScan both legally sound and ethically enforced, not just policy-stated.

A full combined scan typically completes in 15–30 minutes, depending on the size and complexity of your target. All seven scanners run concurrently — OWASP ZAP accounts for the largest share of scan weight and usually takes the longest. You'll receive a notification when your results are ready.

One credit powers one full combined scan of a single target — all seven scanners running concurrently, results merged and deduplicated into a single report. Starter credits are $35 each with no minimum purchase or subscription required. Passive asset discovery (subdomain enumeration) when you add a new target is always free and never consumes a credit.

Credits are valid for one year from the date of purchase. Buy what you need and use them at your own pace — whether that's this afternoon or several months from now.

Yes — and this is one of PenScan's key advantages over a traditional pentest. With a consultant, getting a fix re-verified meant a new scoping conversation and often a new invoice. With PenScan, mark a finding as fixed, run a new scan, and confirm the remediation actually worked. The audit log captures the full timeline for compliance purposes.

Yes. PenScan supports team collaboration with role-based access control. Invite team members as Owners (full access), Analysts (can run and review scans), or Viewers (read-only access to reports). All roles operate within your organisation's isolated workspace — completely separate from every other account on the platform.

PenScan orchestrates seven industry-standard tools: OWASP ZAP (web application scanning), Nuclei (CVE & misconfiguration templates), Wapiti (SQLi, XSS, CSRF), Nikto (web server fingerprinting), SSLyze (TLS/SSL analysis), Nmap (port & service discovery), and Dalfox (advanced XSS fuzzing). All results are merged and deduplicated into a single prioritised report.

Yes. Each organisation's data is isolated in a multi-tenant architecture — no other user or organisation can access your targets, scans, or vulnerability reports. Data is encrypted in transit (TLS 1.3) and at rest. Scan results and API tokens are never stored in plaintext.