Pentera pricing: the $120,000 AWS listing, UK rate card and renewal terms

By The PenTest Index · Published prices and terms checked October 10, 2026

Pentera pricing is by quote: Pentera publishes no price list. Two public figures exist. Its AWS Marketplace listing shows $120,000 for a 12-month contract, but points buyers to a private offer and doesn't say which products or how many machines that covers. A 2024 UK reseller rate card lists Pentera Core from £63,750 to £175,000 a year by endpoint band.

Neither figure is a quote for you. Below we show what each one covers, do the per-endpoint and renewal sums, and give you the questions to send before you sign. We read Pentera's listing, its license terms and the rate card ourselves. We have not bought or run Pentera.

Our read, in four lines.

Pentera is worth a quote if you have hundreds to thousands of internal machines, Active Directory, and a security team that will run tests every month. Your license lasts for the term in your order, which can also set limits on when and how often you test.
The software alone is probably not your purchase if you need one signed pentest report for a customer or auditor. Pentera's own platform page says it does not certify compliance, and it sells the signed test as a separate service.
Under about 500 endpoints, check the floor first. The only public rate card starts at a 500-endpoint band.
Either way, the first question is the same: which products, how many endpoints, what term, and what renewal cap?

Already scoped and ready? Pentera's contact form is one route to request a quote.

Request pricing from Pentera

Pentera pricing: what is public and what isn't

Two real figures are public, and neither comes from a Pentera price page. Pentera's site has no pricing page at all; pentera.io/pricing/ returned "not found" when we checked.

Source	Who published it	Figure	Unit and term	What it is not
AWS Marketplace listing "Pentera"	Pentera (the seller)	$120,000	One line called "Pentera," 12-month contract, US dollars	Not a quote. The line tells buyers to ask for a private offer. It names no products and no endpoint count.
UK G-Cloud 14 rate card, 2024	Cantium, a UK reseller	£63,750	Pentera Core, up to 500 live and unique endpoints, per year, before VAT	Not a current price. Not Pentera's direct price. Support is extra.
Same rate card	Cantium	£75,000	Pentera Core, up to 1,000 endpoints, per year, before VAT	Same limits
Same rate card	Cantium	£175,000	Pentera Core, up to 5,000 endpoints, per year, before VAT	Same limits
Same rate card	Cantium	£15,938 / £18,750 / £43,750	RansomwareReady add-on at 500 / 1,000 / 5,000 endpoints, per year, before VAT	May no longer be sold separately (see below)

All rows read October 10, 2026. The first is provider-published. The rest are reseller-published for UK public-sector buyers.

Three things to know about these numbers.

The AWS figure is a list price on a marketplace. The same listing says extra AWS infrastructure costs may apply, and that all fees are non-cancellable and non-refundable except as required by law. Think of four different numbers: the listed price, the private offer Pentera sends you, the order you sign, and the invoice you pay. Only the first is public.

The UK card is from 2024 and Pentera changed its packaging in 2025. A Frost & Sullivan report that Pentera hosts says Pentera simplified its pricing in April 2025 and began bundling add-on modules and advisory services with its core products. So the separate RansomwareReady line on the old card may not exist in a quote today. Ask.

The ranges you see elsewhere have no source we could find. Several pages repeat "from about $35,000" and "$50,000 to $100,000." Those are those sites' claims. We could not trace them to a Pentera document, so they are not in our table.

We don't convert pounds to dollars here. A 2024 UK reseller price and a 2026 US list price are different things, and an exchange rate wouldn't make them the same.

How does the Pentera price change with endpoint count?

On the one public rate card, the price moves in bands, not per machine. Fill a band and the average falls from £127.50 to £35 per endpoint. Sit just over a band edge and you pay for the next band up.

These are our sums from the 2024 Cantium card:

Band on the card	Core price per year	Per endpoint if you fill the band	Core plus RansomwareReady
Up to 500	£63,750	£127.50	£79,688
Up to 1,000	£75,000	£75.00	£93,750
Up to 5,000	£175,000	£35.00	£218,750

It works like phone data sold in tiers. Use one gigabyte more than your tier and you buy the next tier.

The floor. The smallest band is 500. With 120 machines, £63,750 works out to £531.25 each.
The steps. Going from 500 to 1,000 adds £11,250, or £22.50 per added endpoint. Going from 1,000 to 5,000 adds £100,000, or £25.00 per added endpoint.
The cliff. 1,200 endpoints don't fit the 1,000 band. The next band listed is 5,000 at £175,000, which is £145.83 each at 1,200. The card lists only three bands. Whether others exist in between is unknown, so ask.

Don't multiply £35 by your device count and call it a Pentera quote. These are band averages from one reseller in one year.

Is Pentera priced per endpoint, per IP or per test?

Software is licensed by scope and term; SECTOR11 also sells one-time testing services. Each product counts something different, and Pentera's published terms say what.

Product	What the published terms count	A term worth knowing	Source (last updated)
Core (internal network)	End Points in your order. An End Point is a unique host or device, physical or virtual, that the product scans.	Use above the licensed number is prohibited and may be restricted.	Core Plus license terms (May 27, 2026)
Cloud	End Points and Workloads. A Workload is an active cloud compute instance: a server, container or serverless resource.	When you add a cloud account, every workload in it counts. You can't remove an account once added.	Cloud addendum (April 15, 2026)
Surface (internet-facing)	Limits set in the order, such as users, domains, subdomains and assets.	You must confirm which discovered assets are yours before they are tested.	Surface agreement (September 27, 2026)
Resolve (fix tracking)	Limits set in the order, such as users, assets and number of integrations.	Its own agreement.	Resolve agreement (May 27, 2026)
SECTOR11 (human testers)	Prepaid credits, or one-time work.	Unless the order says otherwise, credits expire at the end of the term with no carry-over.	SECTOR11 agreement (June 17, 2026)

All read October 10, 2026. No current price is published for any of these products.

The cloud line deserves a second look. Say you connect an AWS account with 40 servers today, and your developers spin up 200 containers next quarter. Under the published addendum those count, and the account can't be taken back out. Get the growth rule in writing before you connect anything.

What does the license include, and what costs extra?

By default you get the software and up to 3 hours of support a month. That is 36 hours a year. Almost everything else depends on your order form.

Support. The Core, Surface and Resolve terms all give up to 3 hours a month at no extra charge unless the order says otherwise. The 2024 UK card listed support as an extra, scoped cost. Ask what more hours cost.
Advisory. Pentera sells Security Validation Advisory. Per the Frost report it has been bundled with core products since April 2025. Ask how many hours are in your order.
Modules. The Core terms name Credential Exposure and RansomwareReady as modules "as specified in the Order Form." A feature on a web page is not a feature in your contract.
Human testing. SECTOR11 is a separate agreement. Its credit-based services are annual, prepaid, non-cancellable and non-refundable by default. Work must start within 12 months, with one free reschedule if you give 30 days' notice. Travel for on-site work is billed at cost.
Tax. The UK rate card excludes VAT; Surface, Resolve and SECTOR11 terms exclude applicable taxes. Core's posted terms do not specify tax treatment.

What happens to the price at renewal?

It renews by itself, for the same length as your first term, and the fee can go up by as much as 7% each time. To stop it you must give written notice at least 60 days before the term ends. Those are the defaults in Pentera's published Core, Surface and Resolve terms. Your order form can change them, so read it.

Term	What the published text says	Why you care
Auto-renewal	Renews for a period the same as the first term, or one year, whichever is longer	Sign for three years and the default renewal is three more
Notice	Written notice not less than 60 days before the term ends	A term ending December 31, 2027 needs notice by November 1, 2027
Price at renewal	Fees may rise up to 7% over the previous term, on auto-renewal	Ask for a lower cap in the order form
Payment (Surface and Resolve)	US dollars, invoiced in advance, due within 10 days, non-refundable; 1.5% a month on late amounts	The Core terms we read have no payment clause, so that sits in your order form
Late payment	15 days overdue and Pentera may suspend	Tell accounts payable about the 10 days
Resellers	A reseller can't make promises on Pentera's behalf	If a reseller promised it, get it on the order form
Changes	Pentera may change the posted terms without notice	Keep a dated copy of what you agreed to

Sources: Core Plus terms, section 2; Surface agreement, sections 5.2 and 12.1; Resolve agreement, sections 5.2 and 12.1. Read October 10, 2026. This is our reading of published text, not legal advice. For a commitment this size, a contract review is money well spent.

What 7% does over three years. Say your fee matched the AWS list figure of $120,000 on one-year terms, and it rose the full 7% each renewal. Year two is $128,400. Year three is $137,388. Three years cost $385,788, which is $25,788 more than a flat price. That is an illustration of the cap, not a forecast.

Check your own quote

Put your numbers in. The check keeps "known so far" apart from "complete," works out cost per endpoint, and gives you the deadline for non-renewal notice to take effect.

Runs in the browser. Nothing is sent or stored.

Pentera quote check

Turn a written Pentera quote into: a known subtotal or a complete commitment, an annualized figure, cost per licensed endpoint per year, the maximum fee for the next renewal term under a stated cap, and the deadline for non-renewal notice to take effect. It compares written offers. It does not estimate a Pentera price.

Don't enter credentials, findings or network details. This is arithmetic on the numbers you type. It is not a quote.

Worked example (fictional, not a Pentera offer)

USD. Software license $180,000. Required setup fee $15,000. Term 24 months ending December 31, 2028. Licensed endpoints 1,000. Cap 7%. Notice 60 days.

All amounts known

Complete commitment: $195,000
Annualized: $97,500Comparison figure. Not your billing schedule.
Per licensed endpoint per year: $90.00
Renewal term: 24 monthsSame term or one year, whichever is longer.
Maximum next-term software fee: $192,600 (up $12,600)Most the software fee could be for the next term under this cap, assuming unchanged licensed scope and applicable default terms. Not a forecast.
Notice-effective deadline: November 1, 2028Notice must take effect by this date. Send earlier. Check how notice must be delivered.

Not in this sum

Tax
Support beyond the included hours
AWS infrastructure charges

Add a Required extra "Extra support" marked "Amount not known yet"

Known subtotal: Known subtotal: $195,000 — total not completeUnknown: Extra support — Not entered — ask Pentera.
Per licensed endpoint per year: $90.00
Renewal term: 24 monthsSame term or one year, whichever is longer.
Maximum next-term software fee: $192,600 (up $12,600)Most the software fee could be for the next term under this cap, assuming unchanged licensed scope and applicable default terms. Not a forecast.
Notice-effective deadline: November 1, 2028Notice must take effect by this date. Send earlier. Check how notice must be delivered.

Not in this sum

Tax
Support beyond the included hours
AWS infrastructure charges
Extra support

Which contract are you actually signing?

Ask, because Pentera publishes at least five and they don't all say the same thing.

Here is what we found on October 10, 2026. Pentera's AWS listing describes the whole platform: internal, cloud and external testing. But the agreement that listing links to is headed "Surface – Software Subscription Agreement," and its setup schedule describes the external attack surface only. Core has its own license terms. Cloud is an addendum to those. Resolve and SECTOR11 each have their own.

That doesn't prove a problem. It does mean the $120,000 line can't be read as "all products, on these terms." If you buy more than one product, or buy through AWS, ask Pentera to name the governing document for each line on your order.

Will Pentera count as a penetration test for your auditor or customer?

That is your report reader's call, not Pentera's and not ours. What we can tell you is how Pentera describes its own products.

Its platform page lists frameworks it supports with evidence, then says: "Pentera does not certify compliance or claim FedRAMP authorization." Its home page says the platform includes autonomous penetration testing but works differently from a traditional pentest. And its SECTOR11 page describes a separate service where its testers deliver "a signed penetration test with formal attestation."

So there are two different things on offer. One is software your team runs. The other is testing by SECTOR11 experts; its Test & Comply service is described as delivering a signed penetration test with formal attestation. That service is sold separately, through credits or one-time work. SECTOR11 lists retesting as a step, but publishes no number of retests and no deadline.

Before you buy either, ask whoever wants the report three questions:

Does the testing have to be led by people?
Does the tester have to be independent of us?
Do you need proof that fixes were re-checked?

If they say an automated platform you run yourself is fine, Pentera's software may cover it. If they want a signed, independent test, you are pricing SECTOR11's Test & Comply service or another testing firm. For background, see how a penetration test differs from a scan and our guide to automated penetration testing.

If what you need is a tested web app or API and a report someone outside your company will read, that is a different purchase from a Pentera license. Our free tool asks three questions, shows which compared offers fit, and gives you a scope brief to copy or print. It needs no email, and nothing is sent to providers.

Find My PenTest Match

One honest limit: that tool compares web app and API testing offers. If your need is an internal network, it won't list many matches, and Pentera's own form is the better next step.

Is Pentera worth it for a small company?

Check the floor before the features. On the only public rate card, the smallest band is 500 endpoints at £63,750 a year. With 120 machines you would be paying £531.25 each for capacity you don't use.

Buyers say similar things. One small-business reviewer on G2 wrote that the product is "too expensive." One PeerSpot reviewer described it as aimed at environments above 500 IPs. Those are individual buyer reports, not Pentera's terms, but they point the same way as the card.

There is also the question of who runs it. Pentera is software. Someone on your side schedules the tests, reads the results and gets things fixed. If you have no security staff, a scoped test by a testing firm usually fits better. If you want a tool with a lower floor, see the alternatives below.

Can you buy Pentera through AWS Marketplace or a reseller?

Yes to both. Pentera announced its AWS Marketplace listing on April 15, 2026, and it sells through resellers too.

On AWS the public line is $120,000 for 12 months, with pricing set by private offer. Pentera says buying this way can count toward committed cloud spend. That is Pentera's claim; your AWS account team can tell you whether it applies to you. Remember the refund line on the listing: non-cancellable and non-refundable except as required by law.

With a reseller, keep one clause in mind. Pentera's terms say a reseller is not authorized to make promises on its behalf. A discount, an extra module or a renewal cap offered by a reseller counts only if it's on the order form.

If you're an MSSP or consultant, stop here first. The standard Core terms forbid giving third parties access to the product, and name service-bureau use as an example. Running Pentera for your clients needs written permission from Pentera. Get that before you price anything.

Questions to send Pentera before you sign

Send these with your scope and ask for one itemized proposal back. Each one closes a gap in what Pentera publishes.

Which products and modules are on this order: Core, Surface, Cloud, Resolve, RansomwareReady, Credential Exposure?
How many endpoints does it license, how do you count one, and can we swap endpoints in and out during the term?
What bands or unit sizes sit near our count, and what happens if we go over mid-term?
For Cloud: how are workloads counted when a cloud account grows, and what does growth cost?
What is the full price for the first year and for the whole term, with every required fee listed?
What is the term, and will it auto-renew for the same length?
Will you write a renewal cap below 7% into the order form?
What is the last date to give non-renewal notice? Please write it on the order.
What are the payment terms and currency? Is anything refundable?
How many support and advisory hours are included, and what do extra hours cost?
If we need a signed test for an auditor, is that SECTOR11? How many credits, at what price, expiring when, with how many retests?
Which legal document governs each line on this order, including if we buy through AWS?
Can we run a short proof of value on our own systems first, with success criteria agreed up front?

These questions help you buy. They don't authorize testing. Written authorization has to cover the real targets and activities, and it comes from your agreement with Pentera and from whoever owns the systems.

Request a scoped Pentera quote

When the proposal comes back, our guide to comparing a penetration testing quote shows how to line it up against others.

Pentera alternatives, or keeping the tester you have

If your current yearly test already satisfies whoever asked for it, you may not need anything new. Pentera earns its place when you want testing between those yearly dates and have people to act on the results.

Your situation	Where to look	Keep in mind
Your current test already covers the request	Confirm scope, date and fix evidence with the report reader	A new purchase may be unnecessary
Internal network, want a per-asset price and a low floor	Horizon3.ai NodeZero. A UK reseller's G-Cloud 15 card lists $50, $65 or $85 per asset by bundle, with a 100-asset minimum, subject to scoping.	Reseller price for UK public-sector buyers, read October 10, 2026. The card doesn't state the billing period. It also says you can't reduce assets mid-term.
One web app, signed report, small budget	Pentest-Tools.com black-box web test at $3,400, or gray-box test from $3,400 plus $900 per user role. Astra Pentest Expert at $5,999 per year per target.	Different kind of purchase from Pentera. Prices from our comparison, checked October 7 and 8, 2026.
Human-led test of an internal network	Testing firms that quote by scope. See internal penetration testing.	Send every firm the same scope so the answers line up
You were weighing other validation platforms	The Frost & Sullivan report names Picus Security, Cymulate, XM Cyber and Ridge Security in the same category	We have not read their prices

This table is ordered by situation. It is not a ranking, and no provider pays to appear in it.

The NodeZero card shows a different pricing shape, not a cheaper price. 100 assets at $50 is $5,000. Pentera's smallest listed band was £63,750 for up to 500. Different currency, year, reseller and product. What you can take from it is the question to ask each vendor: "What is your smallest unit, and what do I pay at my real count?"

Compare published penetration testing offers

What do Pentera reviews say about price?

Mixed, and useful mainly for questions to ask. We read the pricing pages on PeerSpot and G2 on October 10, 2026. We have not analyzed the reviews as a set.

On PeerSpot, one reviewer puts the yearly cost for all features at about $120,000. Others call it "expensive," or "relatively cheap" for what it found. These are buyer reports we can't verify. The $120,000 happens to match the AWS list figure, but one reviewer's number doesn't confirm a price.
G2 shows an average discount of 12%, drawn from its user reviews, and says Pentera has not listed pricing there.
On Reddit, buyers have asked for "indicative pricing" on Pentera and compared it with Horizon3.ai.

Why are real numbers so scarce? Pentera's published terms treat the pricing in your order as confidential and say customers may not share it. That is why you see guesses instead of invoices.

Quick answers

Does Pentera have a free trial?

We found no self-serve trial. Pentera's site offers a demo, and one of its comparison pages invites buyers to "put Pentera to a 1-day test," with no conditions shown. G2 states that Pentera does not offer a free trial. Ask what a proof of value includes and what it costs.

Does Pentera replace a yearly penetration test?

It depends on who needs the report. Pentera's software runs tests as often as you like. Whether that satisfies an auditor, customer or insurer is their decision. See the auditor section above.

Is the $120,000 AWS price per year or per month?

It is listed as the cost for a 12-month contract. Dividing by 12 gives $10,000 a month as budget arithmetic only. The linked agreement says fees are invoiced in advance.

Sources and how we checked

Every price and term on this page comes from the published source linked beside it. We read each one on October 10, 2026, and the sums are our own. Where a source leaves something out, we say so and give you the question to ask. We don't sell or perform testing, and we don't authorize it. See how we check offers and how we make money.

Pentera on AWS Marketplace: the $120,000 line, refund policy, infrastructure note
Agreement linked from the AWS listing: headed Surface – Software Subscription Agreement
Cantium G-Cloud 14 pricing document: 2024 UK reseller prices for Pentera Core and RansomwareReady
Core Plus End User License Terms (last updated May 27, 2026)
Cloud Addendum to License Agreement (last updated April 15, 2026)
Surface Software Subscription Agreement (last updated September 27, 2026)
Resolve Software Subscription Agreement (last updated May 27, 2026)
SECTOR11 Master Services Agreement (last updated June 17, 2026)
Pentera Platform and SECTOR11 Adversarial Testing Services: company statements on compliance and signed tests
Pentera on AWS Marketplace announcement (April 15, 2026)
Frost Radar: Automated Security Validation, 2026 (Frost & Sullivan, February 2026, hosted by Pentera)
Sapphire G-Cloud 15 pricing for NodeZero: UK reseller prices per asset
G2: Pentera pricing and PeerSpot: Pentera pricing: buyer-reported views
The PenTest Index comparison: Pentest-Tools.com and Astra prices, checked October 7 and 8, 2026