Penetration Testing as a Service (PTaaS) Subscription
An annual subscription that replaces the once-a-year pentest: a baseline test, then testing of new features and releases through the year, unlimited retests, findings delivered into your ticketing system and a standing attestation letter that is always current. It is the recurring form of the Penetration Testing service and the delivery model behind the PTaaS pillar of the program.
In scope
- Annual baseline penetration test
- Release and feature testing on a monthly or quarterly cadence
- Unlimited retests of fixed findings
- Findings delivered to Jira / GitHub / Linear
- Always-current attestation letter
You receive
- Baseline and incremental test reports
- Live findings in your ticketing system
- Quarterly security posture summary
- Attestation letter on demand
Tiers
Choose the depth.
Essential PTaaS
$2K / mo
One application: annual baseline plus quarterly incremental testing and unlimited retests
- web apps
- 1
- apis
- 2
Advanced PTaaS
$3.5K / mo
Up to three applications or one app plus infrastructure: monthly testing cadence, ticketing integration and quarterly review
- web apps
- 3
- apis
- 6
- external ips
- 100
Enterprise PTaaS
$6K / mo
Portfolio coverage with a dedicated testing pod, release-gated testing, threat modelling of major features and an annual red-team-style scenario
- web apps
- 12
- apis
- 25
- external ips
- 500
Members: engagement coupons from the CISO Marketplace coupon book apply to services. There is no blanket discount.
What's inside this engagement
Phase by phase.
How a continuous / subscription service engagement runs, what happens in each phase and what you see. Exact scope, tier and timeline are fixed in your proposal and SOW.
01Onboarding
Scope, integrations, access and escalation paths set up.
You see · Access and contacts.
02Baseline
An initial assessment establishes where you are before continuous work starts.
You see · The baseline report.
03Continuous operation
The service runs to the agreed scope, with findings delivered as they are confirmed.
You see · Findings in the portal as they land.
04Periodic review
Regular reporting on trends, open items and what changed.
You see · A standing review with your team.
Commercials
From first call to final report.
- 01
Scoping call
A practitioner, not a salesperson, walks through targets, constraints and what a good outcome looks like for you.
- 02
Proposal & rules of engagement
A fixed-scope proposal with tier, price and deliverables. Rules of engagement, contacts and out-of-bounds systems are agreed in writing.
- 03
Sign, then start
MSA and SOW are signed electronically and the deposit is paid. Only then does testing begin.
- 04
Execution
Testing runs to the agreed plan. Critical findings are escalated as they are found; you don't wait for the report.
- 05
Report & debrief
An executive summary plus technical findings with evidence, reproduction steps and fixes, walked through with your team.
- 06
Retest
Where the tier includes it, we verify your fixes and reissue the report, so auditors and customers see the issues closed.
Timelines are set per engagement in the SOW.
Related
Red Team Subscription
A standing offensive testing program in place of a once-a-year engagement. Each month our team runs a targeted assessment against an agreed part of your environment; each quarter a scenario-based attack tests how well your people and tooling detect and respond. The Premium tier adds two full red team engagements a year. Findings from every cycle feed one running improvement plan, so each round also checks whether the last round's fixes held. Targets, rules of engagement and testing windows are agreed at kickoff.
AI & Agentic Red Team
Offensive testing of LLMs and AI agents — prompt injection, jailbreaks, tool misuse, agent goal hijack, memory/context poisoning, model extraction, and agent identity abuse. Mapped to OWASP Top 10 for Agentic Applications, OWASP LLM Top 10, and MITRE ATLAS.
AI/ML Security Assessment
Expert evaluation of artificial intelligence and machine learning systems security, from model development to deployment. Our assessment identifies vulnerabilities in AI/ML infrastructure, examines risks of data poisoning, adversarial attacks, and model manipulation while providing guidance for securing these advanced technologies.
Research
Latest from the blog
operations · Nov 4, 2026
From Bug Bounty to Bench: How Hall of Fame Tiers Feed Our Continuous Testing Flywheel
October brought 28 vulnerability reports from 8 researchers. Here is how our Hall of Fame tiers work, why Silver and Gold are gated on quality not volume, and how proven researchers move onto paid PTaaS and DevSecOps engagements.
incident-response · Oct 31, 2026
The r3@lg00dp@$$w0rd Pentest Story: A Lesson in Patching Over Password Cleverness
A penetration tester used a 2019 Windows flaw to compromise 2,500 machines at a law firm that spent $500,000 on security tools, exposing a CISO's plaintext password along the way.
ciso-strategy · Sep 24, 2026
Brinqa-PlexTrac and Cribl-Radiant Deals Signal CTEM and SOC Platforms Are Absorbing Point Tools
Thirty-three cybersecurity M&A deals in August 2026, led by Brinqa-PlexTrac and Cribl-Radiant Security, show exposure management and SOC platforms swallowing offensive-security and AI-native automation tools.
Start an engagement