Penetration testing for growing businesses

Hackers want in.Lock the doors first.

Fixed-price penetration testing for small and growing businesses, from A$3,999 before GST.

Trusted by teams that need their security to stand up to scrutiny.

Teams use Pensure when they need answers fast.

“Pensure was fast, affordable, and effortless. It's exactly what you want in a modern pen testing partner.”
Ben ShawHead of Engineering @ DataMasque

The cost is real

A cybercrime incident cost a small business A$56,600 on average last year.

Plan a test with Core

ABS • 2024–25

28%no measures

No protection in place

More than 1 in 4 businesses had no measures in place to prevent cyber incidents.

Small businesses • 2024–25

A$56,600average per reported incident

Average incident cost

Small businesses reported an average cost of A$56,600 per cybercrime incident. For large businesses, it was A$202,700.

What we do

We simulate a real attacker.Under controlled conditions.

We show you what they could reach, steal or stop, and tell you how to close the way in. We do it safely, without stealing data or disrupting your systems.

See the full method
  1. 01

    You give us a target

    Share your URL, a few contact details and confirmation that you’re authorised.

    Your part · about 5 minutes

  2. 02

    We test like an attacker

    Within your approved window, we map what’s exposed, safely exploit it and chain weaknesses into real attack paths.

    Our part · no input needed from you

  3. 03

    You get a report you can act on

    Verified findings with evidence, fixes ranked by risk, and a free retest once your fixes are in.

    Our part · retest included

Why teams choose Pensure

Enterprise-grade testing,without the enterprise process.

A$3,999

Fixed price, published upfront

A$3,999 or A$7,999 before GST, depending on your plan. No day rates and no scoping surprises.

Within days

Testing starts sooner

Our AI testing platform works through your agreed target at a depth, accuracy and pace a manual-only engagement can’t match.

AI + human

Expert judgement on Core Plus

A security specialist works alongside our AI testing platform on complex attack paths, where human judgement matters most.

Pricing and plans

Select the assurancethat fits your scale.

For most organisations, Pensure Core is the right choice.

See how we work

Human-led penetration testing

Pensure Core Plus

A$7,999excl. GST

The optimal blend of AI power and expert human judgement for regulated and high-risk organisations.

A specialist penetration tester works alongside Pensure’s AI, testing complex attack paths directly and applying niche expertise where it matters most.

Choose Core Plus if

  • Fintech or payroll platforms moving money or bank details
  • Health platforms holding large volumes of patient data
  • Critical infrastructure with exposed systems
  • A board or regulator will rely on the findings

Core Plus includes

  • Everything in Core, plus
  • Tailored and complex scope assessment
  • Hands-on testing by a specialist penetration tester
  • Expert judgement and final report review

Prices exclude any applicable tax. Tax calculated at checkout where applicable.

The Pensure guarantee

Our fee is on the line.

We hold ourselves fully accountable to your security and success so you can purchase with total confidence.

Both guarantees cover the agreed scope only. Terms and eligibility apply.

Explore our guarantees

Questions, answered

Know what happensbefore you submit.

What is the process?

The process starts with you providing a URL or domain and completing a short scoping form. We confirm what is authorised, test within the agreed window and deliver your report with evidence and fixes.

Can you test my application or API?

Yes. The launch flow starts with one public HTTPS target and can record website, API and authentication coverage decisions. Broader or more complex scope can be discussed through the same Plan a test process.

What does penetration testing help with?

Penetration testing helps identify exploitable weaknesses in the agreed target so your team can reduce exposure. It does not prevent every cyber incident, and it is one part of a broader security programme.

Ready when you are

Turn the next security request into a clear plan.

Start with your URL. We’ll guide you through the rest before any testing begins.