NetDefenders is operated by T.S Squire Assurance Ltd · Registered in the Republic of Cyprus [email protected]
NetDefenders PENETRATION TESTING
Request a test

Pricing

Published prices. Fixed quotes.

Starting prices for a typical scope. After a free scoping call we confirm a fixed price in writing — it will not change once testing starts.

Calculate your price ↓Continuous programmesRequest a test

All prices in EUR, including 19% VAT. Invoiced by T.S Squire Assurance Ltd, Cyprus.

EXTERNAL

External network

from

€1,450 inc. VAT

~2 testing days · remote

Up to 16 public IPs / hosts
Service enumeration & manual exploitation
VPN, RDP, mail & remote-access review
Exposed credentials & attack-surface OSINT
Request this test

INTERNAL

Internal network

from

€2,900 inc. VAT

~4 testing days · on-site or remote

Up to 250 hosts, one site
Active Directory attack paths
Lateral movement & privilege escalation
Segmentation & VLAN separation checks
Request this test

WEB APP

MOST REQUESTED

Web application

from

€2,400 inc. VAT

~3 testing days · remote

One application, 2 user roles
OWASP WSTG & Top 10 coverage
Access control & business-logic testing
Supporting REST/GraphQL API in scope
Request this test

WIRELESS

Wireless

from

€1,450 inc. VAT

~2 days · on-site

One site, up to 3 SSIDs
WPA2/WPA3 & 802.1X configuration
Rogue / evil-twin access point testing
Guest isolation & corporate separation
Request this test

Need something bespoke or larger? Multi-site estates, red-team style engagements and ongoing programmes are quoted at a consultant day rate of €950 inc. VAT.

Talk to us →

Continuous programmes

Manual depth, continuous cadence

For teams that ship often or need year-round evidence for NIS2, DORA or ISO 27001. 12-month programmes, billed monthly, every retest included.

Continuous External

Your perimeter, tested by a person every quarter and watched in between.

from

€590 /month inc. VAT

Monthly external attack-surface review
Quarterly manual external pentest (up to 16 IPs)
Unlimited retests of fixed findings
Same-day alert on critical exposures
Quarterly report + annual attestation letter
Discuss Continuous External

Continuous Complete

BEST VALUE

A year-round human testing programme across your whole estate.

from

€1,450 /month inc. VAT

Everything in Continuous External
Two manual web application tests a year
Annual internal network & Active Directory test
Testing on new releases, scheduled on request
Quarterly risk briefing for leadership
NIS2 / DORA / ISO 27001 evidence pack
Discuss Continuous Complete

Retained days

Prepay a bank of consultant days and call them down for any test, retest or advice over 12 months.

per day

€855

10% off the standard day rate
Use on any service, at your pace
Priority scheduling
Minimum 10 days
Discuss retained days

Why a human

What a scanner can't do

Automated scanning is fast and cheap, and we use it for breadth. But compliance frameworks ask for more than a tool's output — and so do real attackers.

For compliance

A signed test, not a scan report

ISO 27001, SOC 2, PCI DSS and cyber-insurance all expect a penetration test signed off by a named, qualified tester — a scanner subscription does not meet that bar.
A scanner lists what might be vulnerable. A pentest proves what is exploitable and what the business impact is — which is what an auditor, a board and an insurer actually ask for.
For EU financial entities, DORA requires threat-led penetration testing (TLPT) led by qualified people, at least every three years. Automation alone cannot satisfy it.
Every engagement ends with an attestation letter you can hand to customers, auditors and regulators.

A worked example

The printer in the corner

What the scanner says

Either informational — “multifunction printer detected” — or at most medium: “printer with port 9100 open.” It stops there.

What the tester finds

That printer is set up to scan to a file share, so it stores a domain account to reach the share. A tester points the printer's own “test connection” at a server they control (a rogue SMB server, e.g. with impacket). The printer authenticates to it and hands over the account's NetNTLMv2 hash.

Because internal SMB signing is usually not enforced, that captured login can be relayed straight onto another machine — or taken away and cracked offline. A quiet printer becomes a foothold with real credentials.

No scanner reports this — every step on its own looks harmless. The attack is in how they chain.

Price calculator

Build your scope, see your price

Pick one or more services and adjust the scope. The total updates as you go and uses the same rates as the tables on this page.

16 included, then €45 each

250 included, then €650 per extra 250

1 included, then €1,800 each

2 included, then €450 each

1 included, then €750 each

Options

One retest within 30 days is free; extra retests €425 each

Scope add-ons

Larger scope, priced the same way

Add-onApplies toPrice
Additional public IP / hostExternal network€45 each
Additional block of 250 internal hostsInternal network€650
Additional user roleWeb application€450
Additional application or standalone APIWeb applicationfrom €1,800
Additional wireless siteWireless€750
Out-of-hours / weekend testingAny+20%
On-site attendance outside CyprusInternal, wirelessTravel at cost
Additional retest (beyond the free one)Any€425

Always included

No hidden extras

Free scoping call and written fixed quote
Rules of engagement and NDA
Same-day notification of critical findings
Executive and technical report (PDF)
Debrief call with the tester
One free retest within 30 days, plus attestation letter
Request a sample report

Billing

How payment works

Currency & VAT

Prices in EUR, including Cyprus VAT at 19%. Eligible EU businesses under the reverse charge are invoiced the ex-VAT amount.

Payment terms

[e.g. 50% on booking, 50% on report delivery — net 14 days]

Rescheduling

[Cancellation / rescheduling policy]

Get your fixed quote

Tell us the scope and see an instant estimate. We confirm within one working day.

Request a test →