THREATSPIKE RED: UNLIMITED PENTESTING, ONE FIXED PRICE

Summary from the TLDR InfoSec newsletter

Pentesting prices are a CFO's worst nightmare. $50K for a web app test. Another $30K if you want APIs included. Scope creep? That'll be extra. Need a retest after fixes? Start the procurement process again.