Cobalt Pricing, Plans & Alternatives (2026)

Overview

Cobalt sells penetration testing as a service (PTaaS) through its Offensive Security Platform and a vetted community of testers called the Cobalt Core^[11]. It describes its approach as human-led, AI-powered pentesting, with Cobalt Sage AI supporting each test^[11].

Its pricing model is distinctive: a Cobalt Credit represents eight hours of offensive security testing, delivered through a mix of automation and human expertise, and credits are sold in annual packages that cover scoping, testing, retesting and platform access^[11]. Tiers differ in how fast a pentest can start and how long credits last: Standard starts within three business days with a six-month credit pool, Premium within two business days with credits valid for 12 months and a named customer success manager, and Enterprise within one business day with quarterly planning and up to 10% credit rollover^[11].

All tiers include free retesting, Slack-based collaboration with testers and an insights dashboard; higher tiers add DAST, native integrations with Jira and GitHub, customisable reports and custom pentester requests^[11]. Dollar prices are quoted.

Cobalt features

Credits worth 8 hours of testing
Pentest start in 1–3 business days by tier
Free retesting
Real-time collaboration via Slack
Jira and GitHub integrations
Attack surface monitoring and DAST

Cobalt pricing

Annual credit packages; one credit equals 8 hours of testing. Standard: start within 3 business days, credits valid 6 months. Premium: 2 business days, 12 months, named CSM. Enterprise: 1 business day, 12 months, quarterly planning, up to 10% rollover. Prices by quote.