4 ms·
"While the cost of penetration testing can be pretty high (typically between $1,000 and $100,000+)," I've always been curious about costs for real pentesting.
by blakesterz 6y ago
"While the cost of penetration testing can be pretty high (typically between $1,000 and $100,000+),"
I've always been curious about costs for real pentesting. 1-100k is a HUGE range, that can't mean the range in cost for the same project can be that big, can it? What's it cost to hire someone to run a decent set of tests on a Rails app, for instance? Could I really see that big of a range? Would I get way better results for for $100k?
- clktmr 6y agoYou will find exponentially less vulnerabilities the more money you spend. How much you should spend depends on how big the damage could be in case of a breach.
- czbond 6y ago"A rails app" could be a rails default build, or Github. You should get significantly better results the more one pays - because of the human element. For example, $1k gets you a basic Nessus/Nmap (basic vulnerability/mapping) scans, maybe SQL vuln, with automated reporting. More gets you architecture, infrastructure, penetration, white/black scenarios, risk assessment, external organization liability, code repo, data, compliance, and regulatory footing. Those can surpass $100k easily.