# Penetration Testing as a Service (PTaaS) Subscription

> From $2K / mo · Offensive Security · https://cisomarketplace.services/services/penetration-testing-as-a-service-subscription

An annual subscription that replaces the once-a-year pentest: a baseline test, then testing of new features and releases through the year, unlimited retests, findings delivered into your ticketing system and a standing attestation letter that is always current. It is the recurring form of the Penetration Testing service and the delivery model behind the PTaaS pillar of the program.

## In scope

- Annual baseline penetration test
- Release and feature testing on a monthly or quarterly cadence
- Unlimited retests of fixed findings
- Findings delivered to Jira / GitHub / Linear
- Always-current attestation letter

## Deliverables

- Baseline and incremental test reports
- Live findings in your ticketing system
- Quarterly security posture summary
- Attestation letter on demand

## Tiers

### Essential PTaaS: $2K / month

One application: annual baseline plus quarterly incremental testing and unlimited retests

Limits: web apps 1, apis 2

### Advanced PTaaS: $3.5K / month

Up to three applications or one app plus infrastructure: monthly testing cadence, ticketing integration and quarterly review

Limits: web apps 3, apis 6, external ips 100

### Enterprise PTaaS: $6K / month

Portfolio coverage with a dedicated testing pod, release-gated testing, threat modelling of major features and an annual red-team-style scenario

Limits: web apps 12, apis 25, external ips 500

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=penetration-testing-as-a-service-subscription