Grey-Box
Penetration Testing
Test your application with limited information and standard user accounts. Check what an attacker could do after getting basic access.
Overview
The best coverage for your budget.
For most web, API, and mobile applications it delivers the most issues found per day of effort, which is why it is our default recommendation.
Approach
What grey-box covers.
Limited-knowledge, authenticated testing that balances realism and depth.
- Authenticated functionality testing
- Authorisation & role separation
- Privilege escalation between roles
- Business-logic abuse
- Targeted reconnaissance
- API & integration testing
- Realistic attacker simulation
- CVSS-scored findings
FAQ
Grey-box penetration testing FAQ
Scope, cost, and what happens next.
How much does grey-box penetration testing cost?
Grey-box testing typically starts around €2,000 and is scoped by application size and roles. It usually offers the best coverage-per-budget. Use our estimator for a tailored figure.
What is grey-box penetration testing?
Testing with limited information and standard user accounts — enough to thoroughly test authenticated features and authorisation while keeping an attacker’s perspective.
Why do you recommend grey-box for most applications?
It finds the most issues per day of effort: testers do not waste time on reconnaissance, yet still exercise realistic attack paths and authorisation flaws.
What is the difference between grey-box, black-box, and white-box?
Black-box has no information, white-box has full information and source, and grey-box sits in between with limited knowledge and accounts — the balance of realism and depth.
What do we receive?
A CVSS-scored report with reproduction steps, an executive summary, an attestation letter, and a free retest within 60 days.
What do you need for a grey-box test?
Standard user accounts for each role and brief documentation of key features — enough to test authenticated functionality thoroughly.
More questions about this service
Why is grey-box your default recommendation?
It finds the most issues per day of effort, balancing the realism of black-box with the depth of white-box.
Does grey-box cover authorisation flaws?
Yes — with multiple roles we focus heavily on privilege escalation and broken access control, a top source of real-world breaches.
Can we upgrade to white-box mid-engagement?
If you provide source and documentation we can deepen coverage; we agree any scope change before proceeding.
What do we receive?
A CVSS-scored report with reproduction steps, an executive summary, an attestation letter, and a free retest within 60 days.
Related services
Explore more.
Ready for balanced, high-value testing?
Tell us what you’re working on. We’ll help you work out the next step.
Book a short call Send an email