How Long Does a Pentest Take?
The length of a Pentest depends on many factors like the size of the scope, type of scan, type of testing, size of the app, etc.
Quick Scan
A Quick Scan examines your company's landscape for problem areas or weaknesses that could compromise the security of your application.
Quick scans can take anywhere from 4 to 22 days, depending on the scope's size and type. Use this table to determine how long the scan will take:
|
Scope |
Days |
|
Extra Small |
4-6 Days |
|
Small |
6-8 Days |
|
Medium |
8-13 Days |
|
Large |
15-18 Days |
|
Extra Large |
18-22 Days |
Time Boxed Testing
A timebox is a set amount of time during which a person or team works methodically toward achieving a goal. The time difference between these testing times is determined by the application size and what is being tested.
|
Scope |
Days |
|
Extra Small |
6-10 Days |
|
Small |
8-15 Days |
|
Medium |
15-20 Days |
|
Large |
20-25 Days |
|
Extra Large |
25-30 Days |
360 Degree
The 360-degree test, as the name implies, provides a comprehensive assessment of your app's, web page's, or API's landscape security. This is the most thorough testing option, as it ensures that all aspects of your app are reviewed and checked.
|
Scope |
Days |
|
Extra Small |
10-15 Days |
|
Small |
15-20 Days |
|
Medium |
20-25 Days |
|
Large |
22-30 Days |
|
Extra Large |
27-35 Days |