Pentest-Tools.com
Bucharest pentest platform with network and web scanners, exploit tools, AI pentests and published subscription prices
Quick Overview
| Company | PENTESTTOOLS S.A. |
|---|---|
| Category | Bug Bounty Platforms |
| Headquarters | Bucharest, Romania |
| Founded | 2017 |
| EU Presence | Yes - Romania (EU) |
| Data Location | Not stated on the pages checked |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Network and cloud scanner, website and API scanner, subdomain and port discovery, Sniper auto-exploiter, SQLi and XSS exploiters, AI pentests, reporting, REST API, MCP server |
| Pricing | From $96/month (NetScan), $140/month (AppScan), $190/month (Exploit), by asset count |
| Best For | Pentesters and security teams that run their own tests and want evidence and reports |
| Replaces | Self-run testing; complements HackerOne and Bugcrowd |
Detailed Review
The terms name PENTESTTOOLS S.A., a Romanian joint stock company registered in Bucharest. The about page says it has been headquartered in Bucharest since 2017 and serves more than 2,100 customers in 119 or more countries.
It is a toolkit for people who run the test themselves, which is the opposite of a bounty: you buy scanners and exploiters, not researcher time.
Plans Priced by Asset
The pricing page lists NetScan from $96 per month for 16 assets, AppScan from $140 per month for 5 assets and Exploit from $190 per month for 5 assets. Prices vary by asset count and billing cycle, and the page quotes a ten-month price for yearly billing.
All plans include API access, unlimited rescans, team access and integrations.
Scanners and Exploiters
NetScan covers network, cloud and password auditing; AppScan adds DAST, authenticated scans and REST and GraphQL API scanning; Exploit adds an automatic CVE exploiter and SQL injection and XSS exploiters, plus import of findings from Burp Suite.
A pentest report generator is an add-on and exports to Word or Google Docs.
Managed Services
The company also sells managed web app and network pentests, red teaming, adversarial testing for AI apps and compliance pentests on an estimate basis.
Limitations to Consider
Prices are shown in US dollars on the pricing page even though the company is Romanian. It is a self-service toolkit, so there is no researcher community and no triage of outside reports. Several advertised capabilities (AI pentests, MCP server) are marked new on the site. Managed services need an estimate. For a crowd-based program see YesWeHack.
Who Should Use Pentest-Tools.com
Pentesters, MSSPs and in-house security teams that want to run and document their own tests.
Pros and Cons
Pros
- Prices published by asset count
- Wide tool range from recon to exploitation
- Report generator and Burp import
- Romanian S.A. as contracting entity
- REST API and integrations on all plans
Cons
- No researcher crowd or triage service
- Prices quoted in US dollars
- Report generator is an add-on
- Some features marked new
Alternatives to Pentest-Tools.com
Other European bug bounty platforms worth comparing before you decide:
YesWeHack
France · Paris bug bounty and exposure platform hosted in an EU private cloud
Intigriti
Belgium · Antwerp bug bounty platform with managed VDP and PTaaS
Yogosha
France · Vetted researcher community for pentests and private bounties
Detectify
Sweden · Stockholm attack-surface and application scanner with ethical-hacker payloads
See all European bug bounty platforms or compare them directly against Self-run testing; complements HackerOne and Bugcrowd on our alternatives page.
Frequently Asked Questions
The pricing page shows NetScan from $96 per month, AppScan from $140 per month and Exploit from $190 per month, varying with asset count and billing cycle.
No. It provides scanning and exploitation tools you run yourself, plus managed pentest services.
The terms name PENTESTTOOLS S.A., a Romanian joint stock company with its registered office in Bucharest.