Pricing
Continuous testing costs less than you think
Rootshell takes the manual penetration test you already buy and adds AI to it. You get more coverage, testing that carries on through the year and live exploit intelligence, all checked by CREST registered & Cyber Scheme accredited testers. Core for one public-facing web application starts from £3,000 a year, about what a one-off test of the same kind costs at the low end. That covers a human-led, authenticated test and a year of continuous testing.
Book a Demo or Scoping CallHow we compare to traditional testing
Tested by CREST registered & Cyber Scheme accredited professionals
The price scale
The same money. A very different result.
A one-off manual penetration test for a public-facing web application costs, depending on scope, between £3,000 and £10,000. Rootshell Core starts at £3,000 for a full year.
Illustrative: what a one-off test from your current provider might cost. Indicative market ranges. Use the switch to see pounds or US dollars. See the small print.
What you are paying for
A manual pen test, with AI doing more of the heavy lifting
Manual penetration testing is typically £1,000 to £1,600 a day, depending on the provider, the tester's skill and the type of test. It usually ends with a PDF report and spreadsheets, or at best a static results portal. Rootshell keeps that expert, accredited testing and adds what AI does well.
What AI adds
- More comprehensive. AI reasoning widens what gets looked at, so less is missed.
- More continuous. Testing carries on through the year, not for one week.
- Live exploit intelligence. Velma checks every issue against new and active exploits daily.
What people keep
- Safe validation. Accountable testers decide what is tested on live systems.
- Human interpretation. Findings are explained in your context, not just listed.
- Accredited testers. CREST registered & Cyber Scheme accredited.
Continuous testing levels
Core and Managed, the same levels as our home page
Every level is human-led, delivered through the Rootshell Platform, with free remote retests. Core is priced here as a worked example for one public-facing web application. Managed is scoped and quoted to you.
Core
For your internet-facing systems.
£3,000 a year, from
Example: one public-facing web application. Final price depends on size and complexity, and we quote after a short scoping call.
What we test
- Public IP Assets
- Public Web Applications
- Manual baseline test and dynamic scoping
- AI Exploit Detection Service
- Remediation Workflows and SLA Tracking
- Automation Centre
- Complimentary ASM scan
- Platform access, customer success and free remote retests
Book a Demo or Scoping CallHow we compare to traditional testing
Managed
In-depth, authenticated testing of your wider environment, validated by our testers.
Scoped to you
Priced after a scoping call, based on what you need tested.
What we test
- Web Applications
- Endpoints & Servers
- Internal IP Assets
- Social Engineering
- Physical Security
- Cloud Environments
- Public Domain
- Everything in Core
- Test results validated by our testers
- Dedicated account manager
Book a Demo or Scoping CallHow we compare to traditional testing
Side by side
One-off test or Rootshell Core
| One-off manual test from your current provider (illustrative) | Rootshell Core | |
|---|---|---|
| Typical cost | £3,000 – £10,000 | From £3,000 a year |
| When you are tested | Once, for a fixed window | An authenticated manual test, then continuous unauthenticated testing through the year |
| What the price covers | Varies by scope | One public-facing web application: the authenticated test and the year of continuous testing |
| How you get results | Usually a PDF report and spreadsheets, sometimes a static portal | The Rootshell platform, kept current for 12 months |
| Exploit intelligence | Not usually included | On every issue, as standard |
| Retests | Often charged or limited | Free |
| Testers | Varies by provider | CREST registered & Cyber Scheme accredited |
| Other pen test and scanner results | Separate reports | One platform, one view (see small print) |
One view of everything
Bring all your results into one place
The Rootshell platform is vendor-agnostic. It can take in results from other penetration testing companies and from tools such as Qualys, Rapid7, Tenable, Microsoft Defender and AWS Inspector, so you see everything in a single pane of glass. Bringing in third-party data is scoped and priced separately, and we will tell you the cost up front.
Questions
Pricing questions, answered
What does the £3,000 cover?
One public-facing web application. You get a manual penetration test with testers logged in as a user (authenticated), followed by 12 months of continuous testing from the outside (unauthenticated), exploit intelligence on every issue, free remote retests and the Rootshell platform.
What is the difference between authenticated and unauthenticated testing?
Authenticated testing is done logged in, so testers can check what a customer or member of staff could reach once inside the application. Unauthenticated testing checks what anyone on the internet can see and reach without logging in.
How much does continuous testing cost?
Rootshell Core for a public-facing web application starts from £3,000 a year. The price depends on the size and complexity of what you need tested, so we scope it with you first.
Is Core just a normal pen test with a different name?
No. Core starts with an authenticated manual penetration test by accredited testers, then adds continuous unauthenticated testing and exploit intelligence for the rest of the 12 months, with the results on the Rootshell platform.
What changes the price?
The size and complexity of your application, how many applications you have, the type of test, and how much third-party data you want brought into the platform. Managed, which is in-depth testing, is quoted to your scope.
Do you charge for retests?
No. Free remote retests are included in Core.
Can you bring in our other pen test and scanner results?
Yes. The platform works with other providers' penetration test results and with tools such as Qualys, Rapid7, Tenable, Microsoft Defender and AWS Inspector. This is chargeable and is quoted when we scope your work.
Written and reviewed by Tony Allen, Managing Partner of Rootshell. Last reviewed 8 November 2026.
The small print
- "From £3,000 a year" is for Rootshell Core for one public-facing web application: an authenticated manual penetration test followed by 12 months of continuous unauthenticated testing. Your price depends on size, complexity, the number of applications and the type of test, and is confirmed after scoping. Prices exclude VAT.
- Market figures are indicative ranges for one-off manual testing and vary by provider, tester skill and test type: day rates of £1,000 to £1,600, and £3,000 to £10,000 (about $3,900 to $13,000 in US dollars) for a one-off test of a public-facing web application, depending on scope. They are illustrations of what a current provider might charge, not quotes from any named company.
- US dollar prices are shown for convenience and are confirmed at scoping. Day rates in dollars are approximate.
- Rootshell's own testing results sit in the platform as part of your subscription. Importing and maintaining third-party data, such as other penetration test reports and scanner or software integrations, is charged separately and quoted at scoping.
- The scale on this page is illustrative and not drawn to an exact price for every scope.
- Free remote retests apply to issues found in Rootshell testing. The platform subscription in Core runs for 12 months.
- Last reviewed 8 November 2026.
See what your year of testing would look like
Tell us what you need tested and we will scope it with you.
Book a Demo or Scoping CallHow we compare to traditional testing