Information for Penetration Testing Providers

The PenTest Index compares penetration testing offers using the terms providers publish. If your company is listed, or you think an offer should be, this page explains what evidence helps and what payment cannot change.

Evidence that helps

Send what applies to the specific offer:

• the exact company name, offer name and package or tier;
• the official URLs where the terms are published;
• what is in scope, and what access testing needs;
• how testing is done, including the roles of human testers, automation and AI;
• the price basis and the full commitment, including required subscriptions, platform charges, minimum terms and renewal;
• the deliverables, and whether any part of a sample report may be published;
• retest terms: how many are included, the window, what starts it, and whether the deadline applies to the request or to completion;
• timing: booking, start, active testing, first findings and the final report;
• any limits on coverage; and
• for any credential or certification you want shown, evidence from the issuing body.

Identify the date the terms took effect and any differences between packages, regions or contract types. A credential held by a company, a named tester or a specific service is not automatically interchangeable; make the holder and scope clear.

For material you send privately, say which parts may be published and how they should be attributed. We publish private supplied material only when you confirm it may be published, and a written confirmation is labeled as such rather than as provider-published. Remove confidential customer details, credentials and vulnerability findings before sending anything.

We may independently report and analyze public sources without asking a provider to approve the coverage. Permission to publish private supplied material does not give a provider approval rights over public-source facts, comparisons, findings or corrections.

Send evidence to Partners@thepentestindex.com.

Corrections and disputes

If a fact about your offer is wrong or out of date, send the page address, the exact statement, your correction and the evidence, as described in the correction steps.

If you disagree with a Purchase Check finding, send evidence that changes the applicable terms. Findings follow the evidence and the published rules in the methodology. Providers cannot approve findings before publication, and cannot pay for editorial inclusion, position or a different finding.

Submitting information does not guarantee inclusion or a favorable finding. An offer may be outside a comparison's scope, lack the evidence needed for a specific claim, or overlap with an offer already covered. We assess the evidence under the same rules whether or not a commercial relationship exists.

Provider clarification can resolve an unknown or correct an error. It does not establish testing quality, customer outcomes or comparative superiority unless the evidence supports that conclusion.

Commercial inquiries

To propose a referral or affiliate arrangement, describe the offer it would cover, how the arrangement would work, how referrals would be attributed and accepted, and the payout terms.

Any arrangement would be disclosed beside the relevant links, as described in how we make money, and would not change editorial inclusion, default comparison order, findings or corrections.

A commercial inquiry and an evidence submission are separate requests. Payment does not buy publication of unsupported claims, suppression of supported criticism or removal of a competitor.