US$250k+
Nearly 2 in 3 affected small businesses lost more than US$250,000 through lost revenue, recovery costs and fines.
Penetration testing for growing businesses
Hackers want to break into your business.
Lock the doors before they do.
Fixed-price penetration testing for small and growing businesses, from US$3,200.
If it's on the internet, they can probably see it. See what a hacker can stop, break or steal from your systems. We simulate cyber attacks to show you what worked, what matters, and what to fix.
A small-business problem
Nearly 2 in 3 affected US small businesses lost more than US$250,000.
A cyber incident can cost hundreds of thousands of dollars, and attackers increasingly exploit technical weaknesses to get in. Pensure shows you what they could reach and what to fix first.
ITRC Business Impact Report 2025
81%had an incident
4 in 5 US small businesses had a cyber incident in the previous 12 months.
31%started this way
Nearly 1 in 3 breaches began with attackers exploiting a software vulnerability.
Find your real exposure before an attacker does.
Trusted by teams that need their security to stand up to scrutiny.
What we do
We simulate a real attacker.
Under controlled conditions.
We show you what they could reach, steal or stop, and tell you how to close the way in. We do it safely, without stealing data or disrupting your systems.
- 1
Choose your assurance level
Choose Core or Core Plus based on the depth of testing your organisation needs.
- 2
Lock in your scope
Confirm what we are authorised to test. Clear boundaries keep the engagement safe and focused.
- 3
We simulate the attack safely
We use real attack techniques under controlled conditions. No data is stolen, no systems disrupted.
- 4
We issue your report
See what worked, what matters and what to fix first.
Pricing and plans
Choose the assurance level you actually need.
For most organisations, Pensure Core is the right choice.
Both products provide a complete penetration test. Core Plus adds hands-on specialist testing for complex, regulated or high-risk environments.
Recommended for most organisations
Pensure Core
US$3,200
Supports ISO 27001 and SOC 2
The complete Pensure penetration test for most organisations.
Designed to identify exploitable vulnerabilities, provide clear technical evidence and give your team practical remediation guidance.
Core includes
- Compliance-grade automated testing agents
- Comprehensive vulnerability assessment
- Technical evidence and reproduction steps
- Report and practical remediation guidance
The right assurance level for most businesses
Plan a test with CoreHuman-led penetration testing
Pensure Core Plus
US$6,400
Supports ISO 27001 and SOC 2
The optimal blend of AI power and expert human judgement for regulated and high-risk organisations.
A specialist penetration tester works alongside Pensure’s AI, testing complex attack paths directly and applying niche expertise where it matters most.
Core Plus includes
- Everything in Core, plus
- Tailored and complex scope assessment
- Hands-on testing by a specialist penetration tester
- Expert judgement and final report review
Specialist expertise for regulated or higher-risk organisations
Plan a test with Core PlusDecision support
Which sounds more like you?
Core is probably right
- Small to medium-sized business with online presence
- Your business relies on an online or cloud-based booking, POS or service system to keep trading
- You need ISO 27001 or SOC 2 certification to grow your business or get insurance
- E-commerce or SaaS business testing checkout and customer accounts
- 20-person accounting or law firm testing its client portal
- Independent medical and allied health practitioners providing online services
Core Plus may be worth it
- Fintech platform capable of moving significant amounts of money
- Health platform holding large volumes of patient information
- Payroll platform with access to employee banking details
- Critical infrastructure provider testing an externally exposed system
- Major enterprise where a board or regulator will rely on the findings
Prices exclude any applicable tax. Tax calculated at checkout where applicable.
Accuracy you can prove to your stakeholders.
Pensure was fast, affordable, and effortless. It's exactly what you want in a modern pen testing partner.
Why teams choose Pensure
Enterprise-grade testing, made easy for everyone.
Traditional pen testing is priced for larger organisations and scoped over weeks. Pensure is built for teams that need the same rigour, faster and at a price they can approve.
Transparent fixed price, published upfront
US$3,200 or US$6,400. No day rates, no scoping surprises, no quote you have to chase.
AI-powered, so testing starts sooner
Our AI works through your agreed target at a depth and pace a manual-only engagement can’t match. Testing begins in days, not weeks, from submitting your URL.
Expert human judgement with Core Plus
A specialist penetration tester works alongside Pensure’s AI, testing complex attack paths directly and applying niche expertise where it matters most.
A report both audiences can see
Leadership gets business impact. Engineering gets reproduction steps and evidence. One report, no translation required.
A defined test with no procurement fog.
Pensure coordinates US engagements from an expert Australian team, with US-dollar pricing, agreed testing windows and practical evidence for customers, insurers and compliance reviews.
Questions, answered
Know what happens before you submit.
What is the process?
The process starts with you providing a URL or domain name. We'll confirm the target and environment, then schedule a testing window. Once testing begins, we'll work through the agreed scope and provide a report with findings and recommendations. To get started, click Plan a Test
Can you test my application or API?
Yes. The launch flow starts with one public HTTPS target and can record website, API and authentication coverage decisions. Broader or more complex scope can be discussed through the same Plan a test process.
What does penetration testing help with?
Penetration testing helps identify exploitable weaknesses in the agreed target so your team can reduce exposure. It does not prevent every cyber incident, and it is one part of a broader security programme.
Ready when you are
Turn the next security request into a clear plan.
Start with your URL. We’ll guide you through the rest before any testing begins.
Plan a test with Core