Today we're excited to announce the launch of PTaaS (Penetration Testing as a Service), a platform that makes professional security testing accessible to every business — not just those with six-figure security budgets.

For too long, penetration testing has been a luxury reserved for large enterprises. Traditional engagements cost between €10,000 and €50,000, take weeks to schedule, and happen once a year at best. Meanwhile, attackers don't wait. With 43% of cyberattacks targeting small businesses and new vulnerabilities appearing with every deployment, we believe continuous security testing should be the standard, not the exception.

What is PTaaS?

PTaaS is a cloud-based platform that automates web application penetration testing using a DAST (Dynamic Application Security Testing) engine powered by over 8,000 detection templates. It identifies critical vulnerabilities including SQL injection, cross-site scripting (XSS), server misconfigurations, and known CVEs.

Unlike traditional pentests that provide a snapshot in time, PTaaS enables continuous security monitoring. Schedule scans daily, weekly, or monthly, and get notified instantly when new vulnerabilities are found. Each scan produces a detailed PDF report with risk scoring, execution timeline, and step-by-step remediation guidance.

Built for Developers

We built PTaaS with DevSecOps in mind. The platform integrates natively with the tools developers already use: Slack and Discord for real-time notifications (with 9 configurable alert types), Jira and GitHub for automatic issue creation when critical vulnerabilities are found, and a comprehensive REST API with Swagger documentation for full programmatic control.

Webhooks with HMAC-SHA256 signed payloads make it easy to integrate security scanning into CI/CD pipelines. Add a scan to your GitHub Actions workflow, get the results in your Slack channel, and block deployments if critical vulnerabilities are found — all automated.

GitHub Actions Integration

# .github/workflows/security.yml

- name: Security Scan
  run: |
    curl -X POST https://ptaas.contractshield.dev/api/v1/public/scans \
      -H "X-API-Key: ${{ secrets.PTAAS_KEY }}" \
      -d '{"target_url": "${{ env.STAGING_URL }}", "scan_type": "quick"}'

The ContractShield Ecosystem

PTaaS joins ContractShield WAF in our growing security ecosystem. While PTaaS detects vulnerabilities, ContractShield WAF protects your applications in real-time against OWASP Top 10 attacks, SSRF attempts, prototype pollution, and injection attacks.

We practice what we preach: PTaaS itself is protected by ContractShield WAF. We believe in dogfooding our own products, and it's the best testament to the confidence we have in our tools.

Pricing That Makes Sense

We've designed PTaaS to be accessible. Plans start at €49/month for the Starter tier (10 scans, 3 targets), with Pro at €149/month and Business at €399/month for larger teams. One-time scan packs are also available for organizations that prefer testing without a subscription commitment.

Compare that to the €10,000–€50,000 price tag of a traditional penetration test, and the value speaks for itself.

Starter

€49/mo

10 scans • 3 targets

Pro

€149/mo

50 scans • 10 targets

Business

€399/mo

Unlimited scans & targets

What's Next

This is just the beginning. Our roadmap includes container and cloud security scanning (Docker images, Kubernetes auditing, AWS/Azure/GCP assessment), AI-powered auto-remediation, intelligent vulnerability triage, and compliance reporting for SOC2, ISO 27001, and GDPR.

We're also building an admin dashboard for organizations to manage their security posture at scale, with detailed analytics, security event monitoring, and a built-in support ticketing system.

Get Started

Ready to take your application security to the next level? PTaaS is available now. Start with a free trial and see what vulnerabilities are hiding in your web applications.

→ Try PTaaS free: ptaas.contractshield.dev
→ Read the documentation: ptaas.contractshield.dev/docs
→ Questions? Reach us at [email protected]

Introducing PTaaS — Professional Penetration Testing for SMBs, Starting at €49/month