$ pentest --target=network

External and internal network pen test. Two different engagements, two different cost bands.

$ answer --question="What does a network pen test cost?"

External network pen test runs $4,000 to $20,000 depending on the IP and external-service count. Internal network pen test runs $8,000 to $50,000+ driven by Active Directory depth, segment count, and assumed-breach scenarios. A combined external+internal engagement usually discounts the standalone sum by 10 to 20%.

Last verified June 2026

$ stat --slot=1

$4-20K

External network band

IP count drives price

$ stat --slot=2

$8-50K+

Internal network band

AD depth, segments

$ stat --slot=3

10-20%

Combined engagement discount

vs standalone sum

$ stat --slot=4

1-3 wk

Active testing duration

Scope-dependent

$ drivers --price

IP and asset count
External: live IPs and exposed services. Internal: domain controllers, segments, jump hosts.
Active Directory depth
Forest, trusts, GPO count. Tier-0 access scope dramatically changes effort.
Assumed-breach add-on
Start with a foothold (e.g. one compromised workstation) and pivot from there. Common upgrade from baseline internal.
On-site requirement
Internal tests often need on-site days. Travel billed at cost.
Segment count
Each isolated segment adds testing time, especially with strict firewalling.