# Penetration Testing

> From $8K · Offensive Security · https://cisomarketplace.services/services/penetration-testing

Comprehensive penetration testing service including network, application, and infrastructure security assessment. Includes detailed reporting and remediation guidance.

## In scope

- Scoping, rules of engagement and testing windows
- External network testing of internet-facing systems
- Web application testing (authenticated, by user role)
- Internal network testing (Standard and Premium tiers)
- Staff-targeted and on-site testing (Premium tier)
- Retest of remediated findings

## Deliverables

- Penetration test report with reproducible findings and risk ratings
- Executive summary
- Remediation guidance per finding
- Findings walkthrough with your technical team
- Retest results and attestation letter

## Tiers

### Basic (External only): $8K

External testing only: up to 25 internet-facing IPs and 1 web application with up to 2 user roles. Report, one retest and an attestation letter.

Limits: external ips 25, web apps 1, locations 1

Includes:
- External network testing
- One web application
- Report and findings walkthrough
- One retest

Excludes:
- Internal network testing
- Staff-targeted and on-site testing
- More than one application

### External Plus (External only): $12.5K

External testing only, for a larger perimeter: up to 100 internet-facing IPs and 1 web application with up to 2 user roles. Report, one retest and an attestation letter.

Limits: external ips 100, web apps 1, locations 1

Includes:
- External network testing of up to 100 IPs
- One web application
- Report and findings walkthrough
- One retest

Excludes:
- Internal network testing
- Staff-targeted and on-site testing
- More than one application

### Standard (External + Internal): $15K

External and internal testing: up to 50 internet-facing IPs, up to 2 web applications and an internal network of up to 250 hosts at one site.

Limits: external ips 50, web apps 2, internal hosts 250, locations 1

Includes:
- External network testing
- Internal network testing at one site
- Up to two web applications
- Report, walkthrough and one retest

Excludes:
- Staff-targeted and on-site testing
- More than one site

### Premium (Full scope + Social Engineering): $25K

External, internal, staff-targeted and on-site testing: up to 100 internet-facing IPs, 3 web applications, 500 internal hosts and 2 sites.

Limits: external ips 100, web apps 3, internal hosts 500, locations 2

Includes:
- External and internal network testing
- Up to three web applications
- One staff-targeted email exercise
- On-site testing at up to two sites

Excludes:
- Objective-based adversary simulation — see Red Team Assessment
- Environments above 500 hosts — scoped separately

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=penetration-testing