Penetration Testing as a Service (PTaaS) Subscription
An annual subscription that replaces the once-a-year pentest: a baseline test, then testing of new features and releases through the year, unlimited retests, findings delivered into your ticketing system and a standing attestation letter that is always current. It is the recurring form of the Penetration Testing service and the delivery model behind the PTaaS pillar of the program.
In scope
- Annual baseline penetration test
- Release and feature testing on a monthly or quarterly cadence
- Unlimited retests of fixed findings
- Findings delivered to Jira / GitHub / Linear
- Always-current attestation letter
You receive
- Baseline and incremental test reports
- Live findings in your ticketing system
- Quarterly security posture summary
- Attestation letter on demand
Tiers
Choose the depth.
Essential PTaaS
$2K / mo
One application: annual baseline plus quarterly incremental testing and unlimited retests
- web apps
- 1
- apis
- 2
Advanced PTaaS
$3.5K / mo
Up to three applications or one app plus infrastructure: monthly testing cadence, ticketing integration and quarterly review
- web apps
- 3
- apis
- 6
- external ips
- 100
Enterprise PTaaS
$6K / mo
Portfolio coverage with a dedicated testing pod, release-gated testing, threat modelling of major features and an annual red-team-style scenario
- web apps
- 12
- apis
- 25
- external ips
- 500
Members: engagement coupons from the CISO Marketplace coupon book apply to services. There is no blanket discount.
What's inside this engagement
Phase by phase.
How a continuous / subscription service engagement runs, what happens in each phase and what you see. Exact scope, tier and timeline are fixed in your proposal and SOW.
01Onboarding
Scope, integrations, access and escalation paths set up.
You see · Access and contacts.
02Baseline
An initial assessment establishes where you are before continuous work starts.
You see · The baseline report.
03Continuous operation
The service runs to the agreed scope, with findings delivered as they are confirmed.
You see · Findings in the portal as they land.
04Periodic review
Regular reporting on trends, open items and what changed.
You see · A standing review with your team.
Commercials
From first call to final report.
- 01
Scoping call
A practitioner, not a salesperson, walks through targets, constraints and what a good outcome looks like for you.
- 02
Proposal & rules of engagement
A fixed-scope proposal with tier, price and deliverables. Rules of engagement, contacts and out-of-bounds systems are agreed in writing.
- 03
Sign, then start
MSA and SOW are signed electronically and the deposit is paid. Only then does testing begin.
- 04
Execution
Testing runs to the agreed plan. Critical findings are escalated as they are found; you don't wait for the report.
- 05
Report & debrief
An executive summary plus technical findings with evidence, reproduction steps and fixes, walked through with your team.
- 06
Retest
Where the tier includes it, we verify your fixes and reissue the report, so auditors and customers see the issues closed.
Timelines are set per engagement in the SOW.
Related
Red Team Subscription
A standing offensive testing program in place of a once-a-year engagement. Each month our team runs a targeted assessment against an agreed part of your environment; each quarter a scenario-based attack tests how well your people and tooling detect and respond. The Premium tier adds two full red team engagements a year. Findings from every cycle feed one running improvement plan, so each round also checks whether the last round's fixes held. Targets, rules of engagement and testing windows are agreed at kickoff.
AI & Agentic Red Team
Offensive testing of LLMs and AI agents — prompt injection, jailbreaks, tool misuse, agent goal hijack, memory/context poisoning, model extraction, and agent identity abuse. Mapped to OWASP Top 10 for Agentic Applications, OWASP LLM Top 10, and MITRE ATLAS.
AI/ML Security Assessment
Expert evaluation of artificial intelligence and machine learning systems security, from model development to deployment. Our assessment identifies vulnerabilities in AI/ML infrastructure, examines risks of data poisoning, adversarial attacks, and model manipulation while providing guidance for securing these advanced technologies.
Research
Latest from the blog
ciso-strategy · Sep 24, 2026
Brinqa-PlexTrac and Cribl-Radiant Deals Signal CTEM and SOC Platforms Are Absorbing Point Tools
Thirty-three cybersecurity M&A deals in August 2026, led by Brinqa-PlexTrac and Cribl-Radiant Security, show exposure management and SOC platforms swallowing offensive-security and AI-native automation tools.
ciso-strategy · Sep 18, 2026
SE Labs' PIVOT Program: A New Independent Benchmark for Whether Security Products Actually Work
SE Labs launched PIVOT, a six-month, full-attack-chain testing program backed by Broadcom, CrowdStrike, Fortinet, Palo Alto Networks and Sophos, with results due in early 2027.
ai-security · Aug 30, 2026
OpenAI Trained a Model to Stop Saying No. Here's What It Actually Bought Defenders.
GPT-5.6-Cyber completes 95% of advanced offensive security requests that OpenAI's flagship refuses 98.5% of the time. That headline number measures compliance, not competence — and on OpenAI's own vulnerability reporting benchmark the specialized model is worse than the one it replaces. The security control that remains is an allowlist, and the first public data point on how well that scales went the wrong direction.
Start an engagement