$ pricing --vendor=intruder
Intruder.io pen-test pricing for 2026. No public pricing. We do not invent a number. This page documents what is publicly stated and what to ask in the scoping call.
Intruder.io does not publish a starting price. Tiered subscription, exact prices on application. Source: https://www.intruder.io/pricing. Verified June 2026. Treat any third-party dollar figure attributed to Intruder.io with caution.
Last verified June 2026
Why this vendor is quote-only
Intruder.io routes every published tier or product to a sales call. The reason varies by vendor: enterprise-only positioning, multi-asset scoping that resists line-item pricing, or compliance bundling where the pen test sits inside a wider SOW. Whatever the reason, no one outside Intruder.io can quote you a number without that call. We will not invent one.
$ list --tiers
Published tier structure. Prices shown only where Intruder.io publishes a number. Quote-only tiers are labelled as such; we do not estimate.
| Tier | Price | Notes |
|---|---|---|
| Essential | base + per-target fee | Best for startups looking to stay compliant |
| Cloud | base + per-target fee | Best for cloud-native companies |
| Pro | base + per-target fee | Best for hybrid environments |
| Enterprise | quote | Best for large attack surfaces |
Source: https://www.intruder.io/pricing · verified 2026-06-19
$ best-for --buyer
SMB and mid-market teams wanting continuous external and authenticated scanning rather than periodic pen test reports.
Scope fit
- external-network
- cloud
- web-app
$ hidden --costs
Line items that often do not appear in the headline Intruder.io quote. Confirm each against the SOW before signing.
- Retest fee
Whether retesting fixed findings is included in the headline price or charged as a separate engagement. Ask before signing.
- Out-of-hours testing
If you need testing outside business hours to avoid production impact, that often carries a premium of 25 to 50%.
- Report format and depth
Executive summary, full technical report, attestation letter for auditors. Some vendors bundle all three, some charge for the attestation separately.
- Travel and on-site
Internal-network or physical pen test usually requires on-site days. Travel is normally billed at cost.
- Bug-bounty payouts
Not applicable here. Bug bounty is not part of the standard engagement.
- Re-scope mid-engagement
If discovery uncovers new in-scope assets, expect a change-order conversation. Cap the change-order rate in the master agreement.
$ vendor --notes
- 14-day free trial, monthly or annual billing, annual saves 20%. Card payment available below 250 licences.
$ nearest --alternatives
Closest comparable vendors to Intruder.io. We pair on pricing model and product fit.
- PenteraPlatform
Automated security validation platform. Not a manual pen-test service. Subscription-based, but pricing is not published.
open pentera-pricing → - Astra SecurityPtaaS
PtaaS vendor with a fully published price card. One of the few firms in this index where the headline number does not depend on a sales call.
open astra-pricing →