The Core Difference
PentestCheck
Active application-layer DAST (SQL injection and LFI tests in Deep mode) and a 0–10 Threat Score on every finding, with each target scored by its worst open finding. Free tier. Webhook alerts on Pro and Enterprise plans.
Intruder
Strong infrastructure scanning engine (ports, services, CVEs). Supports internal network scanning via agent. Good for organizations with significant on-premise or VPC infrastructure alongside external surfaces.
Feature Comparison
| Feature | PentestCheck | Intruder |
|---|---|---|
| External attack surface mapping (EASM) | ||
| Subdomain enumeration | ||
| Port scanning & service fingerprinting | ||
| Active DAST (web vulnerability scanning) | ||
| OWASP Top 10 coverage | ||
| SQL injection / XSS active probing | ||
| CVSS-scored findings | ||
| Webhook alerts (Pro & Enterprise) | ||
| Internal network scanning |
PentestCheck Pricing
| Tier | PentestCheck |
|---|---|
| Free | Free forever — no credit card required |
| Entry | From $59/month |
| Mid-market | From $179/month |
| Enterprise | Custom pricing |
All PentestCheck prices are in US dollars (USD). Enterprise pricing is custom.
When to Choose Each
Choose PentestCheck if:
- Your primary surface is web applications
- You need OWASP Top 10 coverage with CVSS-scored output
Choose Intruder if:
- You have significant internal/on-premise infrastructure
- You need VPC/internal network scanning via agent
- Infrastructure CVE scanning is the primary requirement
Start free — no credit card required
Free plan: 1 target, 3 scans/month. Upgrade when you need more.