Cobalt offers pentests for a variety of asset types: web applications, mobile applications, APIs, internal and external networks, and cloud services (GCP, AWS, Azure).
Some of the most common pentesting use cases we see are compliance, M&A due diligence, customer requests, new release testing, delta testing, single OWASP category testing, exploitable vulnerability testing, and microservice testing.
To determine the number of credits required for a pentest, we look at asset-based parameters. For example, we'd look at the number of users and the number of dynamic pages to determine the scope of a web application test.
Use the Pentest Scoping Tool to discover how many Cobalt Credits you’ll need for your next pentest.