How much does a penetration test cost (33 figures)
The UK Pentest Price Index carries 34 published figures read from 18 sources' own pages; the 32 published figures given by test-type run from 750 to 8,000 GBP, read 11 November 2026.
750 to 8,000 GBP Range by test-type 32 published figures, not one market: read the rows
33 Published figures from 18 source pages, read 13 Nov 2026
18 of 87 Sources read that publish one 21% publish a figure at all
- 9750 to 1,958
- 121,958 to 3,167
- 63,167 to 4,375
- 64,375 to 5,583
- 5,583 to 6,792
- 16,792 to 8,000
Bands
| Bucket | Value |
|---|---|
| 750 to 1,958 | 9 figures |
| 1,958 to 3,167 | 12 figures |
| 3,167 to 4,375 | 6 figures |
| 4,375 to 5,583 | 6 figures |
| 5,583 to 6,792 | 0 figures |
| 6,792 to 8,000 | 1 figure |
18 of the 87 named sources read in full publish a figure; 69 publish none, read 11 November 2026.
By test-type and unit
| Breakdown | Median | Range | Sources |
|---|---|---|---|
| test-type external-network | 2,100 GBP | 1,499 to 2,500 GBP | 3 |
| test-type cyber-essentials-plus | 1,497.5 GBP | 1,150 to 1,795 GBP | 4 |
| test-type web-application | 2,800 GBP | 1,999 to 3,750 GBP | 6 |
| test-type cloud | 3,750 GBP | 1,999 to 4,500 GBP | 3 |
| test-type ithc | 5,195 GBP | 2,390 to 8,000 GBP | 2 |
| test-type website | 750 GBP (one figure) | one figure, no range | 1 |
| test-type mobile-application | 2,800 GBP (one figure) | one figure, no range | 1 |
| test-type desktop-application | 2,700 GBP (one figure) | one figure, no range | 1 |
| test-type iot | 4,500 GBP (one figure) | one figure, no range | 1 |
| test-type saas | 3,750 GBP (one figure) | one figure, no range | 1 |
| test-type social-engineering | 5,000 GBP (one figure) | one figure, no range | 1 |
| test-type wireless | 2,050 GBP | 1,600 to 2,500 GBP | 2 |
| test-type mobile | 4,125 GBP | 3,750 to 4,500 GBP | 2 |
| test-type infrastructure | 1,499 GBP (one figure) | one figure, no range | 1 |
| test-type internal-network | 3,150 GBP (one figure) | one figure, no range | 1 |
| test-type api | 2,100 GBP (one figure) | one figure, no range | 1 |
| unit per-month | 5,000 GBP (one figure) | one figure, no range | 1 |
| unit per-day | 1,200 GBP (one figure) | one figure, no range | 1 |
Every figure, with its source
One row per published figure: the figure as the source's own page publishes it, the page, and the day it was read. A figure that is not on a page we read is not on this one.
The sentence each figure was read from (34)
- NCSC IT Health Check (ITHC) UK | PSN & GovAssure | Precursor Security, read 2026-11-11:
From £8,000
- Social Engineering Testing UK | From £5,000 | Precursor Security, read 2026-11-11:
Precursor Security delivers social engineering penetration testing across the UK from £5,000, with findings mapped to ISO 27001, DORA, PCI DSS, and NHS DSPT compliance frameworks.
- Social Engineering Testing UK | From £5,000 | Precursor Security, read 2026-11-11:
Social engineering penetration testing typically ranges from £5,000 to £10,000+ depending on scenario complexity, number of employees targeted, and testing types (phishing-only vs combined phishing + vishing + physical intrusion).
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Pentest as a Service (PTaaS) From £5,000/mo Security-conscious organisations, fast-moving dev teams, continuous deployment
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Embedded Device & IoT Testing From £4,500 IoT devices, consumer devices and platforms 5+ days
- Mobile App Penetration Testing UK, From £4,500 | EJN Labs, read 2026-11-11:
£4,500–£7,500
- Penetration Testing Cost UK: 2026 Pricing Guide | EJN Labs, read 2026-11-11:
Most quotes we issue for a mid-sized SaaS product fall inside that band, and AWS, Azure and GCP cloud security reviews start at £4,500.
- Cloud Penetration Testing UK | From £3,750 | Precursor Security, read 2026-11-11:
A single-account AWS, Azure, GCP, or Microsoft 365 assessment starts from £3,750 for a 3-5 day engagement.
- SaaS Penetration Testing UK | Multi-Tenant | Precursor Security, read 2026-11-11:
A small single-product SaaS with one or two roles starts at £3,750.
- SaaS Penetration Testing UK | Multi-Tenant | Precursor Security, read 2026-11-11:
£3,750 – £6,250
- Penetration Testing Cost UK | From £2,500 (2026 Guide) | Precursor Security, read 2026-11-11:
A web application assessment (from £3,750) is the most common starting point for small and mid-size businesses.
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Mobile Application Testing From £3,750 Mobile apps, fintech, healthcare applications
- CREST Penetration Testing UK | Accredited Member Firm | EJN Labs, read 2026-11-11:
Fixed price from £3,500 for a single-role, single-app scope, agreed up front.
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Internal Network Testing From £3,150 All organisations, assumed compromise simulation, enterprise networks
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Mobile Application Testing From £2,800 Mobile apps, fintech, healthcare applications 3-6 days
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Desktop Application Testing From £2,700 Enterprise software, financial platforms 3-5 days
- Penetration Testing Cost UK | From £2,500 (2026 Guide) | Precursor Security, read 2026-11-11:
UK penetration testing costs from £2,500 (external network, 2-3 days) to £25,000+ (full security assessment, 10-20 days).
- Wireless Penetration Testing UK | From £2,500 | Precursor Security, read 2026-11-11:
Precursor Security delivers wireless penetration testing and Wi-Fi security audits across the UK from £2,500, with auditor-ready reports built to satisfy ISO 27001, Cyber Essentials Plus, and PCI DSS requirements.
- IT Health Check, Evolve North, read 2026-11-11:
Starting from £2,390
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Web Application Testing From £2,100 E-commerce, customer portals, business applications, authenticated testing
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
External Network Testing From £2,100 All organisations, compliance requirements
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
API penetration testing: from £2,100
- Penetration Testing for E-commerce | Exploitr, read 2026-11-11:
Web application penetration testing starts from £2,100, with the API behind the application included.
- How Much Does a Penetration Test Cost in the UK? (2026) (2026), read 2026-11-11:
Web App & API Web applications and APIs assessed against OWASP Top 10 - logic flaws, auth bypass, data leakage £1,999
- How Much Does a Penetration Test Cost in the UK? (2026) (2026), read 2026-11-11:
Cloud Security Review Azure, AWS, and M365 tenant security posture - misconfiguration, access controls, identity £1,999
- Cyber Essentials Plus Certification - Secure Your Business from £1750 | Learn More, read 2026-11-11:
From £1795
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Wi-Fi Security Testing From £1,600 Offices, retail, hospitality, healthcare
- Cyber Essentials Cost UK 2026: Prices by Business Size, read 2026-11-11:
Cyber Essentials Plus adds an independent technical assessment and is priced separately from £1,499.99 + VAT.
- How Much Does a Penetration Test Cost in the UK? (2026) (2026), read 2026-11-11:
TEST TYPE WHAT IT COVERS FROM (+ VAT) Infrastructure External and internal network testing - perimeter, lateral movement, segmentation £1,499
- How Much Does a Penetration Test Cost in the UK? (2026) (2026), read 2026-11-11:
UK penetration testing guide prices start from £1,499 + VAT for a focused infrastructure or network assessment, and from £1,999 + VAT for web application and cloud security reviews.
- Cyber Essentials Cost: 2026 Pricing | Forensic Control, read 2026-11-11:
Cyber Essentials Plus costs from £1,495 + VAT per year for organisations with up to nine users.
- Penetration Testing Quote UK | Instant Estimate, No Email | Precursor Security, read 2026-11-11:
Our standard day rate is £1,200 ex VAT.
- Cyber Essentials cost UK: what you should really pay (2026), read 2026-11-11:
Our published Cyber Essentials Plus price is £1,150 + VAT, fixed before we start, delivered in one to three weeks.
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs, read 2026-11-11:
Website Security Testing From £750 Corporate websites, brochureware, WordPress and CMS sites, marketing sites 1-2 days
Read in full, publishes no figure
69 named sources were read in full on the dates shown and print no usable figure. They are counted, never filled in.
- AI Penetration Testing Services | Get A Quote Today | JUMPSEC, read 2026-10-12: read in full and no accepted figure on the page
- Best CREST Penetration Testing Companies UK | 2026 Provider List | EJN Labs, read 2026-11-11: every candidate on the page was refused
- Cloud Penetration Testing: 2026 Buyer's Guide, read 2026-11-11: every candidate on the page was refused
- Cost Of Pen Testing Uncovered | DigitalXRAID, read 2026-09-11: every candidate on the page was refused
- Cyber Essentials Cost 2026: UK Pricing from £320 | CT, read 2026-11-11: every candidate on the page was refused
- Cyber Essentials Plus Certification Cost UK: 2026 Strategic Guide, read 2026-11-11: every candidate on the page was refused
- Cyber Security Cost UK 2026, Real Pricing & Budget Guide, read 2026-11-11: every candidate on the page was refused
- Cyber essentials price changes | Solutions 4 IT, read 2026-11-11: every candidate on the page was refused
- DORA TLPT 2026: Threat-Led Penetration Testing Guide, read 2026-11-11: every candidate on the page was refused
- DORA Threat-Led Penetration Testing: What article 26 actually requires | CovertSwarm, read 2026-11-11: read in full and no accepted figure on the page
- Expert AI-Augmented Pentesting UK | CREST-Approved | OnSecurity, read 2026-09-12: read in full and no accepted figure on the page
- FAQs, Frequently Asked Questions | Hedgehog Security, read 2026-09-12: read in full and no accepted figure on the page
- Fixed-Price vs Day-Rate Penetration Testing - EJN Labs, read 2026-11-11: every candidate on the page was refused
- Home - Cyber Tec Security, read 2026-11-11: read in full and no accepted figure on the page
- Home - MDSec, read 2026-09-12: read in full and no accepted figure on the page
- How Much Does Penetration Testing Cost In The UK?, read 2026-11-11: every candidate on the page was refused
- How Much Does Penetration Testing Cost? | Pen Test Cost UK, read 2026-11-11: every candidate on the page was refused
- How Much Penetration Test Cost? 2026 Pricing Guide for SaaS & Enterprises, read 2026-11-11: every candidate on the page was refused
- How much does Penetration Testing Cost?, read 2026-11-11: every candidate on the page was refused
- How much does a penetration test cost?, read 2026-11-11: read in full and no accepted figure on the page
- How much does penetration testing cost in 2026?, read 2026-11-11: every candidate on the page was refused
- IT Health Check (ITHC) Service UK | CHECK & NCSC Accredited | CyberLab, read 2026-10-12: read in full and no accepted figure on the page
- IT Health Check (ITHC) | Assure Technical, read 2026-11-11: read in full and no accepted figure on the page
- IT Health Check (ITHC) | heretek.co.uk, read 2026-11-11: read in full and no accepted figure on the page
- IT Health Check: CHECK Requirements Explained | DigitalXRAID, read 2026-09-12: read in full and no accepted figure on the page
- Intruder Pricing | Plans & Bolt-ons, read 2026-11-11: every candidate on the page was refused
- Mobile App Penetration Testing Cost UK 2026 | EJN Labs, read 2026-11-11: every candidate on the page was refused
- Mobile App Penetration Testing Cost: 2026 Pricing for iOS and Android | Budget Security, read 2026-11-11: every candidate on the page was refused
- NHS DSPT Penetration Testing: What Suppliers Must Have in Place, Aardwolf Security, read 2026-11-11: read in full and no accepted figure on the page
- NHS DSPT Requirement 9.4.5: Independent Data Protection Audit Explained, read 2026-11-11: read in full and no accepted figure on the page
- Network Penetration Testing Cost UK: Internal vs External, read 2026-11-11: every candidate on the page was refused
- PCI DSS Penetration Testing: Requirement 11.4 (2026), read 2026-11-11: every candidate on the page was refused
- Part 1: CBEST Series - Beyond the Checklist | CovertSwarm, read 2026-11-11: read in full and no accepted figure on the page
- Pen Testing Price List UK and EU Guide 2026, read 2026-11-11: every candidate on the page was refused
- Penetration Test Cost UK: Why the Cheapest Quote Usually Costs More, Aardwolf Security, read 2026-11-11: every candidate on the page was refused
- Penetration Testing Companies UK: Guide & Reviews (2026), read 2026-11-11: every candidate on the page was refused
- Penetration Testing Coordinator at Leading Global Bank - Prism Infosec, read 2026-11-11: read in full and no accepted figure on the page
- Penetration Testing Cost & Pricing In 2026: Buyer's Guide, read 2026-11-10: every candidate on the page was refused
- Penetration Testing Cost 2026: Pricing & ROI ($5K, $50K+), read 2026-11-10: every candidate on the page was refused
- Penetration Testing Cost Per Hour and Day Rates 2026, read 2026-11-11: every candidate on the page was refused
- Penetration Testing Cost UK 2026: Pricing Guide & Factors, read 2026-10-12: every candidate on the page was refused
- Penetration Testing Cost UK: Pricing Guide 2026 | Fortbridge, read 2026-11-11: every candidate on the page was refused
- Penetration Testing Cost in 2026: Pricing for Startups, read 2026-11-11: every candidate on the page was refused
- Penetration Testing Cost: 2026 Enterprise Budgeting Guide, read 2026-10-12: every candidate on the page was refused
- Penetration Testing Cost: How Much Does a Pentest Cost in 2026? | Budget Security, read 2026-11-11: every candidate on the page was refused
- Penetration Testing Pricing in 2026, read 2026-11-10: every candidate on the page was refused
- Penetration Testing Services : UK Pen Testing Company, read 2026-11-11: read in full and no accepted figure on the page
- Penetration Testing Services | CREST-Accredited | Dionach, read 2026-11-11: read in full and no accepted figure on the page
- Penetration Testing UK 2026: Cost, Process & What You Need to Know | Safetech Blog, read 2026-11-11: read in full and no accepted figure on the page
- Penetration Testing UK: Costs, Types & How to Choose a Pr..., read 2026-11-11: every candidate on the page was refused
- Penetration Testing | Pen Test Partners, read 2026-09-12: read in full and no accepted figure on the page
- Pentest Pricing & Penetration Testing Costs | Cobalt, read 2026-11-10: every candidate on the page was refused
- Pentest-Tools.com pricing | Plans, features, costs explained, read 2026-11-11: every candidate on the page was refused
- Pentesting Pricing 2026 Guide: Examples, Cost Factors, and 5 Pricing Models | CyCognito, read 2026-11-11: every candidate on the page was refused
- Plans & Pricing | Astra Pentest Suite, read 2026-11-10: read in full and no accepted figure on the page
- Pricing | CovertSwarm, read 2026-11-11: every candidate on the page was refused
- Red Teaming Services | CREST Accredited - CovertSwarm, read 2026-11-11: every candidate on the page was refused
- SOC 2 Certification Cost UK: Type 1, Type 2 and Fees, read 2026-11-11: every candidate on the page was refused
- Security Testing, Aardwolf Security, read 2026-11-11: read in full and no accepted figure on the page
- The 7 Best Penetration Testing Companies UK (2026 Guide) | Precursor Security, read 2026-11-11: every candidate on the page was refused
- The Real Cost of Penetration Testing in the UK in 2026, read 2026-11-11: every candidate on the page was refused
- Threat led Penetration Testing and Its Role in DORA Compliance, read 2026-11-11: read in full and no accepted figure on the page
- Threat-Led Penetration Testing For DORA - How Does It Work?, read 2026-11-11: every candidate on the page was refused
- What Are NHS DTAC Penetration Testing Requirements?, read 2026-11-11: every candidate on the page was refused
- What Is A Red Team Exercise? A UK CISO’s Expert Guide 2026, read 2026-11-11: every candidate on the page was refused
- What Is a Threat-Led Penetration Test (TLPT)? | Hedgehog, read 2026-09-12: every candidate on the page was refused
- What to Budget for a Penetration Test in the UK: A Buyer’s Guide, Aardwolf Security, read 2026-11-11: every candidate on the page was refused
- yupl.com | 526: Invalid SSL certificate, read 2026-11-11: every candidate on the page was refused
- Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets | IT Jobs Watch, read 2026-11-11: every candidate on the page was refused
Methodology
Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2).
18 of the 87 named sources that could be read published a usable figure; 69 published none and are recorded as not published, never filled in; 4 could not be read (blocked, dead or unreachable) and count nowhere.
The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in GBP (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 33 figures, never sentences; 845 candidate sentence(s) were refused by a reviewer with the reason recorded.
The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): every price a UK penetration testing provider states on its own site, normalised to one grid - test type (external infrastructure, internal/Active Directory, web application, API, mobile, cloud, wireless, social engineering, red team, ITHC, Cyber Essentials Plus), unit (per day, per engagement, per application, per IP, per month), the day count assumed, whether retest, VAT and out-of-hours are included, and whether the firm is CHECK or CREST assured - giving the median day rate, the interquartile spread and the low-high range per test type, the CREST premium measured rather than asserted, the retest-included share, the minimum engagement that dominates small scopes, and the share of providers that publish any price at all.
The buyer's actual complaint - the same scope quoted at GBP 1,500 by one firm and GBP 9,000 by another - is the number this index answers, and no page anywhere computes it across publishers.
845 candidate sentences on these pages were refused by a reviewer; each refusal and its reason is recorded in the review ledger.
Sources (91)
- AI Penetration Testing Services | Get A Quote Today | JUMPSEC(the publisher's own terms; quoted for reporting and comment)
- Best CREST Penetration Testing Companies UK | 2026 Provider List | EJN Labs(the publisher's own terms; quoted for reporting and comment)
- CREST Penetration Testing UK | Accredited Member Firm | EJN Labs(the publisher's own terms; quoted for reporting and comment)
- Cloud Penetration Testing UK | From £3,750 | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- Cloud Penetration Testing: 2026 Buyer's Guide(the publisher's own terms; quoted for reporting and comment)
- Cost Of Pen Testing Uncovered | DigitalXRAID(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials Cost 2026: UK Pricing from £320 | CT(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials Cost UK 2026: Prices by Business Size(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials Cost: 2026 Pricing | Forensic Control(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials Plus Certification - Secure Your Business from £1750 | Learn More(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials Plus Certification Cost UK: 2026 Strategic Guide(the publisher's own terms; quoted for reporting and comment)
- Cyber Essentials cost UK: what you should really pay (2026)(the publisher's own terms; quoted for reporting and comment)
- Cyber Security Cost UK 2026, Real Pricing & Budget Guide(the publisher's own terms; quoted for reporting and comment)
- Cyber essentials price changes | Solutions 4 IT(the publisher's own terms; quoted for reporting and comment)
- DORA TLPT 2026: Threat-Led Penetration Testing Guide(the publisher's own terms; quoted for reporting and comment)
- DORA Threat-Led Penetration Testing: What article 26 actually requires | CovertSwarm(the publisher's own terms; quoted for reporting and comment)
- Expert AI-Augmented Pentesting UK | CREST-Approved | OnSecurity(the publisher's own terms; quoted for reporting and comment)
- FAQs, Frequently Asked Questions | Hedgehog Security(the publisher's own terms; quoted for reporting and comment)
- Fixed-Price vs Day-Rate Penetration Testing - EJN Labs(the publisher's own terms; quoted for reporting and comment)
- Home - Cyber Tec Security(the publisher's own terms; quoted for reporting and comment)
- Home - MDSec(the publisher's own terms; quoted for reporting and comment)
- How Much Does Penetration Testing Cost In The UK?(the publisher's own terms; quoted for reporting and comment)
- How Much Does Penetration Testing Cost? | Pen Test Cost UK(the publisher's own terms; quoted for reporting and comment)
- How Much Does a Penetration Test Cost in the UK? (2026) (2026)(the publisher's own terms; quoted for reporting and comment)
- How Much Penetration Test Cost? 2026 Pricing Guide for SaaS & Enterprises(the publisher's own terms; quoted for reporting and comment)
- How much does Penetration Testing Cost?(the publisher's own terms; quoted for reporting and comment)
- How much does a penetration test cost?(the publisher's own terms; quoted for reporting and comment)
- How much does penetration testing cost in 2026?(the publisher's own terms; quoted for reporting and comment)
- IT Health Check (ITHC) Service UK | CHECK & NCSC Accredited | CyberLab(the publisher's own terms; quoted for reporting and comment)
- IT Health Check (ITHC) | Assure Technical(the publisher's own terms; quoted for reporting and comment)
- IT Health Check (ITHC) | heretek.co.uk(the publisher's own terms; quoted for reporting and comment)
- IT Health Check, Evolve North(the publisher's own terms; quoted for reporting and comment)
- IT Health Check: CHECK Requirements Explained | DigitalXRAID(the publisher's own terms; quoted for reporting and comment)
- Intruder Pricing | Plans & Bolt-ons(the publisher's own terms; quoted for reporting and comment)
- thecyphere.com(the publisher's own terms; quoted for reporting and comment)
- thecyphere.com(the publisher's own terms; quoted for reporting and comment)
- Mobile App Penetration Testing Cost UK 2026 | EJN Labs(the publisher's own terms; quoted for reporting and comment)
- Mobile App Penetration Testing Cost: 2026 Pricing for iOS and Android | Budget Security(the publisher's own terms; quoted for reporting and comment)
- Mobile App Penetration Testing UK, From £4,500 | EJN Labs(the publisher's own terms; quoted for reporting and comment)
- NCSC IT Health Check (ITHC) UK | PSN & GovAssure | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- NHS DSPT Penetration Testing: What Suppliers Must Have in Place, Aardwolf Security(the publisher's own terms; quoted for reporting and comment)
- NHS DSPT Requirement 9.4.5: Independent Data Protection Audit Explained(the publisher's own terms; quoted for reporting and comment)
- Network Penetration Testing Cost UK: Internal vs External(the publisher's own terms; quoted for reporting and comment)
- PCI DSS Penetration Testing: Requirement 11.4 (2026)(the publisher's own terms; quoted for reporting and comment)
- Part 1: CBEST Series - Beyond the Checklist | CovertSwarm(the publisher's own terms; quoted for reporting and comment)
- Pen Testing Price List UK and EU Guide 2026(the publisher's own terms; quoted for reporting and comment)
- Penetration Test Cost UK: Why the Cheapest Quote Usually Costs More, Aardwolf Security(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Companies UK: Guide & Reviews (2026)(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Coordinator at Leading Global Bank - Prism Infosec(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost & Pricing In 2026: Buyer's Guide(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost 2026: Pricing & ROI ($5K, $50K+)(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost Per Hour and Day Rates 2026(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost UK 2026: Pricing Guide & Factors(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost UK | From £2,500 (2026 Guide) | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost UK: 2026 Pricing Guide | EJN Labs(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost UK: Pricing Guide 2026 | Fortbridge(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost in 2026: Pricing for Startups(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost in UK 2026 - Cyphere(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost: 2026 Enterprise Budgeting Guide(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Cost: How Much Does a Pentest Cost in 2026? | Budget Security(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Pricing UK | Fixed-Price Pentest Costs(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Pricing in 2026(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Quote UK | Instant Estimate, No Email | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Services : UK Pen Testing Company(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing Services | CREST-Accredited | Dionach(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing UK 2026: Cost, Process & What You Need to Know | Safetech Blog(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing UK: Costs, Types & How to Choose a Pr...(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing for E-commerce | Exploitr(the publisher's own terms; quoted for reporting and comment)
- Penetration Testing | Pen Test Partners(the publisher's own terms; quoted for reporting and comment)
- Pentest Pricing & Penetration Testing Costs | Cobalt(the publisher's own terms; quoted for reporting and comment)
- Pentest-Tools.com pricing | Plans, features, costs explained(the publisher's own terms; quoted for reporting and comment)
- Pentesting Pricing 2026 Guide: Examples, Cost Factors, and 5 Pricing Models | CyCognito(the publisher's own terms; quoted for reporting and comment)
- Plans & Pricing | Astra Pentest Suite(the publisher's own terms; quoted for reporting and comment)
- Pricing | CovertSwarm(the publisher's own terms; quoted for reporting and comment)
- Red Teaming Services | CREST Accredited - CovertSwarm(the publisher's own terms; quoted for reporting and comment)
- SOC 2 Certification Cost UK: Type 1, Type 2 and Fees(the publisher's own terms; quoted for reporting and comment)
- SaaS Penetration Testing UK | Multi-Tenant | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- Security Testing, Aardwolf Security(the publisher's own terms; quoted for reporting and comment)
- Social Engineering Testing UK | From £5,000 | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- The 7 Best Penetration Testing Companies UK (2026 Guide) | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- The Real Cost of Penetration Testing in the UK in 2026(the publisher's own terms; quoted for reporting and comment)
- Threat led Penetration Testing and Its Role in DORA Compliance(the publisher's own terms; quoted for reporting and comment)
- Threat-Led Penetration Testing For DORA - How Does It Work?(the publisher's own terms; quoted for reporting and comment)
- What Are NHS DTAC Penetration Testing Requirements?(the publisher's own terms; quoted for reporting and comment)
- What Is A Red Team Exercise? A UK CISO’s Expert Guide 2026(the publisher's own terms; quoted for reporting and comment)
- What Is a Threat-Led Penetration Test (TLPT)? | Hedgehog(the publisher's own terms; quoted for reporting and comment)
- What to Budget for a Penetration Test in the UK: A Buyer’s Guide, Aardwolf Security(the publisher's own terms; quoted for reporting and comment)
- Wireless Penetration Testing UK | From £2,500 | Precursor Security(the publisher's own terms; quoted for reporting and comment)
- yupl.com | 526: Invalid SSL certificate(the publisher's own terms; quoted for reporting and comment)
- Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets | IT Jobs Watch(the publisher's own terms; quoted for reporting and comment)
- ncsc.gov.uk(the publisher's own terms; quoted for reporting and comment)
Cite or embed this figure
The UK Pentest Price Index carries 34 published figures read from 18 sources' own pages; the 32 published figures given by test-type run from 750 to 8,000 GBP, read 11 November 2026.
18 of the 87 named sources read in full publish a figure; 69 publish none, read 11 November 2026.
UK Pentest Price Index, test-type external-network: median 2,100 GBP across 3 sources, read 11 November 2026.
UK Pentest Price Index, test-type cyber-essentials-plus: median 1,497.49 GBP across 4 sources, read 11 November 2026.
UK Pentest Price Index, test-type web-application: median 2,800 GBP across 6 sources, read 11 November 2026.
UK Pentest Price Index, test-type cloud: median 3,750 GBP across 3 sources, read 11 November 2026.
UK Pentest Price Index, test-type ithc: median 5,195 GBP across 2 sources, read 11 November 2026.
UK Pentest Price Index, test-type website: median 750 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type mobile-application: median 2,800 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type desktop-application: median 2,700 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type iot: median 4,500 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type saas: median 3,750 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type social-engineering: median 5,000 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type wireless: median 2,050 GBP across 2 sources, read 11 November 2026.
UK Pentest Price Index, test-type mobile: median 4,125 GBP across 2 sources, read 11 November 2026.
UK Pentest Price Index, test-type infrastructure: median 1,499 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type internal-network: median 3,150 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, test-type api: median 2,100 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, unit per-month: median 5,000 GBP across 1 source, read 11 November 2026.
UK Pentest Price Index, unit per-day: median 1,200 GBP across 1 source, read 11 November 2026.
Cite as: "penetrationtestingcost.co.uk UK Pentest Price Index", updated 2026-11-13, https://penetrationtestingcost.co.uk/datasets/uk-pentest-price-index/.
Download the CSV (34 rows, computed 2026-11-13)
Get a pen test quote
Describe what needs testing; accredited providers quote your scope directly. Free, no obligation.
Questions this data answers
What does a penetration test cost in the UK, by test type, unit and provider?
The UK Pentest Price Index carries 34 published figures read from 18 sources' own pages; the 32 published figures given by test-type run from 750 to 8,000 GBP, read 11 November 2026.
What is the published figure for web-application in the UK Pentest Price Index?
For web-application, the median published figure is £2,800 across 6 figures from the sources' own pages, from £1,999 to £3,750, read 11 Nov 2026.
What is the published figure for cyber-essentials-plus in the UK Pentest Price Index?
For cyber-essentials-plus, the median published figure is £1,497.50 across 4 figures from the sources' own pages, from £1,150 to £1,795, read 11 Nov 2026.
What is the published figure for external-network in the UK Pentest Price Index?
For external-network, the median published figure is £2,100 across 3 figures from the sources' own pages, from £1,499 to £2,500, read 11 Nov 2026.
What is the published figure for cloud in the UK Pentest Price Index?
For cloud, the median published figure is £3,750 across 3 figures from the sources' own pages, from £1,999 to £4,500, read 11 Nov 2026.
Where do the figures in the UK Pentest Price Index come from?
Every figure is quoted from its source's own page and dated (last read 11 Nov 2026). 87 named sources were read and 18 publish a figure; the 69 that publish none are recorded as not published, never estimated.