Guide · PTaaS
PTaaS: people testing, through a platform.
Penetration testing as a service means ordering tests on a platform, seeing findings as testers log them, and asking for retests without a new contract. The testing is still done by people; the platform standardises ordering, communication and reports, which is why many PTaaS vendors publish prices and consulting firms rarely do.
PTaaS, consulting firm or automated platform
| Consulting firm | PTaaS platform | Automated platform | |
|---|---|---|---|
| Who tests | The firm’s own team | Testers through the platform | Software, sometimes with human review |
| How you buy | Statement of work per engagement | Subscription or credits | Subscription or license |
| Findings arrive | In the final report | As they are found | As runs complete |
| Retests | Per contract terms | Usually requested in the platform | Rerun on demand |
| Best for | Complex or unusual scopes, red teams | Repeat app tests, compliance cycles | Frequent infrastructure testing |
PTaaS platforms and what they publish
| Firm | Type | Pricing | Retest | Sample report |
|---|---|---|---|---|
| Cobalt | PTaaS platform | Published | Published | Not stated |
| Synack | PTaaS platform | Published | Published | Open |
| HackerOne | PTaaS platform | Not stated | Published | Not stated |
| Bugcrowd | PTaaS platform | Not stated | Published | Open |
| BreachLock | PTaaS platform | Not stated | Published | Not stated |
| NetSPI | PTaaS platform | Not stated | On request | Open |
From each platform’s own pages, checked November 8, 2026. Published prices are on the cost page.
Questions
What is PTaaS?
Penetration testing as a service: a platform where you order tests, watch findings arrive as testers report them, discuss them with the testers and request retests, usually under a subscription or credit model. The testing itself is still done by people.
Is PTaaS cheaper than a consulting firm?
Often for small, repeat scopes, because ordering and reporting are standardised. For large or unusual scopes the difference narrows. Compare published prices where platforms show them.
How is PTaaS different from automated pentesting?
PTaaS is people testing through a platform. Automated or autonomous pentesting is software doing the testing. Some vendors combine both.
Sources for this page
- Cobalt: own website — Service model, pricing and retest terms as published.
- Synack: own website — Service model, pricing and retest terms as published.
- HackerOne: own website — Service model, pricing and retest terms as published.
- Bugcrowd: own website — Service model, pricing and retest terms as published.
- BreachLock: own website — Service model, pricing and retest terms as published.
- NetSPI: own website — Service model, pricing and retest terms as published.
How firms are chosen, what counts as "published" and how to send a correction: methodology.
Cite this page
Pentesting Firms. "PTaaS (penetration testing as a service): how it works and who offers it." Updated November 8, 2026. https://pentestingfirms.com/ptaas/