The estimation engine for penetration testing teams. Turn scoping into a repeatable, defensible, data-driven process — calibrated against a growing internal dataset of real engagements.
Real-world pentest effort is never one number. Technical testing, compliance mapping, and reporting are modelled as independent dimensions — because that's how delivery actually works.
Scales with attack surface, RBAC depth, multi-tenancy, financial workflows, GraphQL, and AI features.
Mapped per framework — OWASP ASVS, PCI DSS, DORA, ISO 27001, NIS2, SOC 2 — with evidence depth as the driver.
Scales with audience, remediation detail, and retest scope. Small ≠ simple.
No setup. No login required. Generate an explainable, defensible estimate now.
Launch the wizard