The average costs for web app pen testing mainly depend on the application’s size and complexity and vary from a few thousand dollars to over 100,000 USD for a single pen test. The major factors which affect the final pricing are roles and permissions, dynamic pages, API endpoints, mobile variations, the testers’ skill level and tech stack, and many more.