Audit-ready penetration testing you can start in minutes.
Manual testing, transparent pricing, and a 2-minute self-serve checkout. Audit-ready external penetration tests aligned to PCI-DSS, SOC 2, NYDFS, HIPAA, and CMMC. Fully self-serve, no sales calls or quotes required.
testing experience
major industry sectors
certifications held
Built for teams that need results, not sales calls.
Our approach is designed for real security impact: fixed pricing, no sales calls, and testing designed to uncover the types of weaknesses real attackers exploit. This creates a faster and more transparent process. Your security team receives findings and recommendations they can act on quickly, and your compliance reviewers can process the results without unnecessary back-and-forth. Our core objective is to uncover hidden vulnerabilities in your environment before attackers do, while delivering clear, defensible security findings in a format designed to support regulatory and compliance review. Every part of our process is intentionally built to support that goal.
Practitioner-built
Designed for real delivery by a senior tester not optimized around a sales pipeline.
Audit-ready reporting
Clear findings with risk ratings that hold up in compliance and audit review.
Fixed scope
Know exactly what's included before you buy. No hidden add-ons, no scope creep.
Self-serve, no calls
Answer a few very quick questions, purchase, and receive your report. No sales rep required at any step.
Predictable pricing
Published pricing by IP range. Fast procurement, fewer surprises, faster decisions.
Consistent quality
Repeatable methodology, same quality baseline on every engagement, at any volume.
From purchase to report in five steps.
Every step is designed to be fast and low-friction. Most customers are in active testing within five business days of purchase.
Choose your scope
Select the IP range that matches your environment from our published pricing tiers. No scope negotiation, no custom quotes. Just pick what fits.
Complete your purchase
Self-serve checkout via Stripe. No PO required for standard tiers. Payment confirms your engagement immediately.
Confirm scope and schedule
We'll reach out within one business day to confirm your target systems, rules of engagement, emergency contacts, and testing window.
Testing occurs
Active testing during the agreed window. Your designated emergency contact remains reachable throughout. We pause immediately if anything unexpected arises.
Receive your report
Professional deliverables: executive summary, technical findings, risk ratings, remediation guidance, and compliance attestation delivered within five business days of test completion. We can also schedule a video call to review the report and answer any questions you have. We are also happy to do seperate technical and board-ready video calls if needed.
No surprises. Every engagement includes all of this.
We don't tier our deliverables. Every customer at every scope level receives the same professional reporting package.
Executive Summary
A non-technical narrative written for leadership, boards, and auditors. Summarizes risk posture, key findings, and recommended priorities.
IncludedTechnical Findings Report
Every identified vulnerability documented with evidence, affected systems, attack path, and technical context. Written for your security and engineering teams.
IncludedRisk Ratings
Each finding rated Critical, High, Medium, or Low with CVSS scores where applicable. Clear, consistent risk language your auditors recognize.
IncludedRemediation Guidance
Step-by-step remediation recommendations for every finding, prioritized by risk level and tailored to your specific environment.
IncludedCompliance Attestation Letter
A signed attestation letter which includes scope and testing coverage. Formatted for submission to auditors reviewing PCI-DSS, SOC 2, NYDFS, HIPAA, or CMMC requirements.
IncludedExpert Recommendations
Practitioner-level guidance drawn from direct observation of your environment and prioritized next steps written by the tester who found the issues, not a templated checklist.
IncludedFixed scope. Published rates. No surprises.
Priced by total IPs so you only pay for your actual environment. Manual validation is included at every tier and we don't report false positives.
| Number of IPs to Test | CIDR | Price | Price per IP |
|---|---|---|---|
| 1 IP | /32 |
$4,995 | $4,995 |
| 2–4 IPs | /30 |
$7,995 | $1,999 – $3,997 |
| 5–8 IPs | /29 |
$10,995 | $1,374 – $2,199 |
| 9–16 IPs | /28 |
$15,995 | $1,000 – $1,777 |
| 17–32 IPs Most Popular | /27 |
$25,995 | $812 – $1,529 |
| 33–64 IPs | /26 |
$36,995 | $578 – $1,121 |
| 65–128 IPs | /25 |
$52,995 | $414 – $815 |
| 129–256 IPs | /24 |
$72,995 | $285 – $566 |
Manual validation included at every tier. No false-positive reports. Fixed pricing designed for fast procurement. The time your team saves not managing a sales process has real value and will get you to a remediated state faster.
See the deliverable format before committing.
Download a full sample report. No email required, no pressure, no follow-up calls. We believe you should know exactly what you're buying before you buy it.
Common questions, answered directly.
Do I need a sales call to get started?
What compliance frameworks does your testing support?
How long does testing take?
Can I see a sample report before I buy?
What if my environment includes cloud infrastructure (AWS, Azure, GCP)?
Who actually performs the testing?
How does scheduling work after I purchase?
What systems can I include in scope?
What is your refund policy?
Do you offer retesting after remediation?
Built and operated by a senior practitioner.
Pentest Express is built around a disciplined, practitioner-first mindset: deliver a strong quality baseline, keep scope and pricing clear, and avoid adding complexity customers didn't ask for.
Trey Blalock is a highly respected senior penetration tester who has performed extensive work across almost every major security domain for some of the world's largest corporations and governments. His background combines hands-on technical depth, large-scale security operations, and extensive speaking and training experience across advanced security topics.
Over fifteen years of experience providing penetration testing and assessment services to hundreds of clients in the financial, government, retail, chemical, aviation, oil & gas, medical, educational, legal, telecom, and law enforcement sectors.
He has trained numerous Fortune 100 companies, consulting firms, and federal agencies including the DIA, FBI, and NSA — on network security, system security, attack and penetration testing, and cloud security. He has performed thousands of penetration tests for Fortune 500 companies globally across various infrastructure devices, operating systems, protocols, and applications.
Trey speaks frequently about advanced security topics at financial institutions and Fintech conferences in the US, Europe, and Africa. He has spoken at DefCon and MITRE ATT&CKcon, and delivered two keynotes at the Department of Homeland Security's annual CISA conferences. He currently serves on several forensic, red-team, and penetration-testing advisory boards, and is a frequent television and podcast guest.
Professional certifications.
Active certifications held across penetration testing, cloud security, forensics, risk management, and compliance.
Ready to get started, or have a question?
Start your test now through our self-serve checkout, or email us directly if you have questions before committing. We respond fast.