Re: Pen-test pricing

[Marc <reply.to.newsgroup () mozilla org>]

I usually have a base price (up to X machines) and extensions based on 
the total number of machines. This usually translates to 1 day for base 
+ extra days if more machines.

Also depends on what the customer wants: vuln. assessment / intrusion 
tests / with or without network discovery. Count ~1 day per item + ~ 3 
days for report and presentation.


--
Marc


Andre Derek Protas wrote:
> Does anyone have any good figures on pricing for pen-tests?  Is charging 
> done per server, location, or hour?  Any help would be appreciated.
>
> ::andre::