[ale] OT: Pen test cost

[Jim Kinney]

I've never paid for one but have done tiny ones on a single IP for testing my own stuff. It's a huge amount of work requiring lots of specialized, automated tools. The post test analysis writeup is very challenging. To me, $15k for 50 IPs seems reasonable.

On July 15, 2015 8:22:03 AM EDT, Edward Holcroft <eholcroft at mkainc.com> wrote:
>Folks,
>
>I have a quote for a pen test for my company. It comes to $15k and they
>will be looking at about 50 public IP's. They will give us a full
>report,
>as well as a general report for our client that has demanded the
>testing.
>They also offer a re-test as part of the deal once we have addressed
>any
>potential holes that they discover.
>
>These guys come highly recommended by someone from this list, so I'm
>ready
>to pull the trigger on it. But having no experience in this field, I
>was
>just wondering if someone can comment on the pricing. Is this typical?
>Dies
>it sound about right?
>
>I realize this is like asking "How long's a piece of string?" but I'd
>be
>grateful for any advice. I just need to know if this is in the ball
>park or
>if it's nuts.
>
>cheers
>ed
>
>-- 
>Edward Holcroft | Madsen Kneppers & Associates Inc.
>11695 Johns Creek Parkway, Suite 250 | Johns Creek, GA 30097
>O (770) 446-9606 | M (770) 630-0949
>
>-- 
>MADSEN, KNEPPERS & ASSOCIATES USA, MKA Canada Inc.
>WARNING/CONFIDENTIALITY 
>NOTICE: This message may be confidential and/or privileged. If you are
>not 
>the intended recipient, please notify the sender immediately then
>delete it 
>- you should not copy or use it for any purpose or disclose its content
>to 
>any other person. Internet communications are not secure. You should
>scan 
>this message and any attachments for viruses. Any unauthorized use or 
>interception of this e-mail is illegal.
>
>
>------------------------------------------------------------------------
>
>_______________________________________________
>Ale mailing list
>Ale at ale.org
>http://mail.ale.org/mailman/listinfo/ale
>See JOBS, ANNOUNCE and SCHOOLS lists at
>http://mail.ale.org/mailman/listinfo

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.ale.org/pipermail/ale/attachments/20150715/3253b5ef/attachment.html>