What does a pentest cost?

The price of a pentest depends on scope, complexity and methodology. DongIT works with transparent packages and fixed prices. Enterprise scope can be quoted separately.

Our pentest packages (excl. VAT)

  • Basic Scan — €1,480. Quick security scan for SMB organizations. Ideal for smaller web applications or periodic checks.
  • Quick Pentest — €2,960. Manual pentest for straightforward web applications. Suited to typical SMB applications.
  • Expert Pentest — from €5,040. Thorough pentest for more complex applications with multiple user roles and integrations. Most popular choice for growing SMB and enterprise organizations.
  • Extensive Pentest — from €7,200. Comprehensive pentest including compliance mapping (NIS2, ISO 27001, DigiD). For critical applications and enterprise organizations.

Enterprise scope

For complex scope, multi-target assessments, DORA programmes, TIBER-NL-aligned assessments or recurring pentest cycles, we prepare a tailored quote. Contact us for a complimentary scoping conversation.

Additional services

We also offer additional services priced separately:

  • Retest after remediation
  • Source code review for vulnerabilities at code level
  • Red team assessments for realistic attack simulations
  • Phishing simulations for awareness testing
  • Vulnerability remediation guidance for support in addressing findings

What is included with every package

All packages include: manual testing by OSCP-certified pentesters, four-eyes principle with peer review, reporting through our Security Reporter platform (online access plus exports to PDF and CSV), and direct communication of critical findings through the platform followed up with a phone call.

View our complete packages and pricing, or contact us for a tailored quote.