Compare proposed PenTest starting prices and security coverage for your clients. Buy direct from PhishRoot or through your MSP or MSSP partner — whichever works for you. Wholesale partner terms stay private.
PenTest packages are delivered by PhishRoot testers, by quote, and scheduled after scope approval. Public amounts are starting prices, not private wholesale terms. Written authorization and a signed scope are required before any test. Dollar currency, taxes, payment terms and final price must be confirmed in your partner quote.
By quote · Delivered by PhishRoot testers
AI Pentest
AI + senior validation
Proposed starting price
$3,150
Per engagement · currency confirmed in quote
Single small scope: 1 role, 1 target
Autonomous AI testing with senior human validation of findings
Evidence-backed findings and technical reporting
Reporting to support compliance evidence, not certification
48-hour reporting target · proposed, not guaranteed
By quote: 1 no-charge retest of validated findings within 360 days, confirmed in your quote.
AI Pentest and PhishRoot Strike start with 1 role and 1 target. A broader small-scope discussion may include 1–2 roles and up to 30 pages/endpoints or 25 external assets; it does not automatically qualify for entry pricing. Multi-role or larger scopes require Hybrid or a custom quote.
Potential engagement areas—each requires separate approval and provider confirmation; no package includes all of them:
Web application / API
External network
Internal network
Cloud
Mobile
Source code
AI / LLM
WiFi
Hardware / IoT
Red team
Social engineering
Executive summaries, technical evidence and remediation guidance are delivered with each engagement. Certified staffing, compliance attestations, vishing or dark-web agents and guaranteed turnaround are not included claims. Passive Risk Radar reports do not substitute for penetration-test evidence.
Platform & SOC packages
Separate from the proposed PenTest engagements. Platform and SOC scope is agreed with you or your partner.
Self-managed client security
Team
For partners whose own team reviews findings and coordinates fixes.
Every package uses PhishRoot’s workspace platform. SOC involvement depends on the agreed service.
Capability
Team
Business
Enterprise
Passive domain assessments & branded reports
Included
Included
Included
Separate client workspaces & portfolio visibility
Included
Included
Included
SOC investigation of escalated incidents
Not included
Included
Included
24/7/365 "Follow The Sun" SOC monitoring
Not included
Not included
Included
Business SOC coverage is for incidents your team escalates, not proactive monitoring. Your team approves and applies fixes. Enterprise response scope and targets are defined in the service agreement; customer systems are never changed without approval.
Planned, not included today
Single sign-on and SCIM — planned
Private data region — planned
Respond with custom playbooks — planned
Named engineer and 1-hour response — planned
Active network penetration testing — planned
Internal PenTest sensors and provider report sync — planned
AI, hybrid and manual PenTest execution packages — planned
Recurring PenTest validation, provider retests and Slack collaboration — planned
A quote shaped around your business
Tell us about your organization or client portfolio, the package you’re considering and the SOC support you need. Buy direct or through your MSP or MSSP; partner wholesale terms stay private.
