FIND SECURITY WEAKNESSES BEFORE ATTACKERS DO
Fixed-price external penetration testing. £1,495 + VAT. No ongoing contract.
Find out what an attacker could exploit across your external network before they get the opportunity.
Bunker PenTest covers up to 10 public IP addresses and includes clear executive and technical reporting, prioritised remediation recommendations, a findings review and one remediation retest within 30 days.
Need something more complex? We can also provide internal network, web application, API, cloud and CREST accredited penetration testing, scoped separately.
WHAT DOES BUNKER PENETRATION TESTING INCLUDE?
External network penetration testing, clear reporting and practical remediation guidance with specialist testing available where required
UK-based IT & cyber security partner
Bunker manages the testing process and helps you turn security findings into practical remediation.
Clear remediation priorities
Understand which vulnerabilities create the greatest risk, with clear findings and practical recommendations.
External testing
Test your internet-facing systems from an attacker’s perspective to identify and validate exploitable weaknesses.
Repeatable testing
One remediation retest is included within 30 days. PenTest 365 provides ongoing vulnerability scanning and quarterly penetration testing.
A Five-Stage Penetration Testing Framework
Our five-stage external penetration testing process takes you from defining the scope through to testing, validation, clear reporting and remediation retesting.
Confirm the external IP addresses, testing scope and objectives before testing begins.
Perform external network penetration testing to identify and validate potential security weaknesses.
Safely test whether identified vulnerabilities can be exploited and what access they could provide.
Translate findings into clear executive insight, technical evidence and prioritised remediation actions.
Retest identified vulnerabilities within 30 days to confirm remediation has been successful.
Vulnerability Scanning Is Not the Same as Penetration Testing
Finding a possible weakness is useful. Understanding whether it can be exploited — and what that could mean for your organisation — provides much deeper insight.
Identifies potential vulnerabilities
Scans systems and networks for known security weaknesses, misconfigurations and exposed services.
SHOWS WHAT MAY BE VULNERABLE
Provides potential findings that can be reviewed, prioritised and investigated further.
Primarily detection-focused
Identifies potential weaknesses but does not necessarily demonstrate whether they can be exploited.
USEFUL FOR ONGOING SECURITY VISIBILITY
Regular scanning helps identify new vulnerabilities as systems, software and infrastructure change.
PEN TESTING AS A SERVICE
Cyber Risk Doesn’t Stand Still. Why Should Your Testing?
Instead of relying on a once-a-year snapshot, Bunker PenTest 365 combines ongoing vulnerability scanning with quarterly penetration testing to identify new weaknesses, track remediation and measure improvements over time.
CHOOSE THE RIGHT PENETRATION TESTING APPROACH TEST ONCE. OR KEEP TESTING.
BUNKER PENTEST
Know what an attacker could exploit today.
£1,495
Fixed price. No contract.
Best for: Annual testing, cyber insurance, customer assurance and organisations wanting to understand their current exposure.
You receive:
✓ External penetration test
✓ Up to 10 external IP addresses
✓ Executive & technical report
✓ Clear remediation recommendations
✓ 30-minute findings review
✓ One remediation retest within 30 days
BUNKER PENTEST 365
ONGOING VULNERABILITY SCANNING
Keep testing as your environment and threats change.
£595 / month
12-month agreement
Ongoing vulnerability scanning + quarterly penetration testing
Quarterly penetration testing plus ongoing vulnerability scanning and remediation tracking.
Best for: Organisations wanting continuous security assurance rather than an annual point-in-time test.
You receive:
✓ Continuous/regular vulnerability scanning
✓ Vulnerability identification & alerts
✓ Remediation tracking
✓ Quarterly penetration testing
✓ Retesting following remediation
✓ Quarterly security review
✓ Progress and trend reporting
How Does Bunker Deliver Penetration Testing?
Powered by Vonahi vPenTest
Bunker PenTest uses specialist automated penetration testing technology from Vonahi vPenTest to safely identify and validate weaknesses across your external network.
Bunker manages the testing process from start to finish — confirming the scope, reviewing the results and providing clear reporting and practical remediation guidance.
The result: a repeatable penetration testing service that identifies exploitable weaknesses and gives you clear actions to reduce your risk.
Bunker PenTest includes:
External network testing · Exploitation validation · Executive reporting · Technical findings · Remediation guidance · Retesting
Need specialist testing? Internal networks, web applications, APIs and more complex environments can be scoped separately.
READY TO TEST YOUR SECURITY?
Start with a fixed-price Bunker PenTest for £1,495, or choose ongoing security assurance with PenTest 365.
What is penetration testing?
Penetration testing is a security assessment that identifies vulnerabilities and then safely tests whether those weaknesses can be exploited.
Unlike a vulnerability scan, which primarily identifies potential vulnerabilities, a penetration test goes further by demonstrating how weaknesses could potentially be used by an attacker and what systems or data may be exposed.
Bunker provides internal and external network penetration testing, followed by clear findings and prioritised remediation guidance.
What is the difference between a vulnerability scan and a penetration test?
A vulnerability scan identifies potential security weaknesses, such as known vulnerabilities, exposed services and configuration issues.
A penetration test goes further by safely attempting to exploit identified weaknesses to understand whether they present a genuine security risk and what an attacker could potentially achieve.
Both have value, but penetration testing provides deeper validation of your organisation’s security exposure.
What is the difference between internal and external penetration testing?
External penetration testing assesses systems and services that are accessible from the internet, helping identify weaknesses that an external attacker could potentially target.
Internal penetration testing assesses what could happen from within your network — for example, if an attacker gained an initial foothold or an unauthorised device obtained network access.
Depending on your environment and objectives, Bunker can perform internal testing, external testing or both.
How often should we carry out penetration testing?
The right frequency depends on your organisation’s risk, infrastructure, rate of change and security requirements.
For many organisations, an annual penetration test provides a useful point-in-time assessment of their external security. However, new vulnerabilities can emerge and systems can change throughout the year, so organisations with frequently changing infrastructure or higher security requirements may benefit from quarterly testing and ongoing vulnerability scanning.
Bunker offers two approaches:
Bunker PenTest — a one-off penetration test for organisations that want to understand their current exposure.
Bunker PenTest 365 — ongoing vulnerability scanning combined with quarterly penetration testing, remediation tracking and regular security reviews.
What do we receive after a penetration test?
Following a Bunker PenTest, you’ll receive a clear report explaining what was discovered, the associated risk and what should be fixed first.
Your report includes an executive summary, detailed technical findings, evidence of identified vulnerabilities, risk ratings and prioritised remediation recommendations.
We’ll also provide a 30-minute findings review to talk you through the results and answer any questions.
Once you’ve addressed the findings, one remediation retest is included to verify that the identified weaknesses have been resolved.
How much does penetration testing cost in the UK?
Bunker PenTest costs £1,495 + VAT for a standard external penetration test covering up to 10 public IP addresses. This includes penetration testing, exploitation validation, an executive and technical report, remediation recommendations, a findings review and one retest.
For organisations that require ongoing security assurance, Bunker PenTest 365 costs £595 + VAT per month on a 12-month agreement and combines ongoing vulnerability scanning with quarterly penetration testing, remediation tracking and security reviews.
More complex requirements — including internal networks, web applications, APIs, larger environments or CREST-accredited testing — are scoped and priced separately.
Not sure which you need? Start with the £1,495 Bunker PenTest.
