UK and EU financial services (particularly Bank of England-regulated firms requiring STAR-FS), EU regulated industries needing TIBER-EU threat-led red teaming, and US enterprises with UK operations needing CREST / CHECK-certified testing under Lloyds Register backing.
US Fortune 500 wanting the largest researcher pool (HackerOne / Bugcrowd better), US federal buyers (Synack better federal pedigree), mid-market SaaS companies (Cobalt better fit), or buyers prioritizing product-led platform workflow over services-led delivery.
Is Nettitude a trustworthy vendor?
- 2018-04-22Acquired by Lloyds Register; long-term ownership stability secured under marine and industrial classification society
- 2022-09-22STAR-FS accreditation maintained; Bank of England intelligence-led pen testing capability strengthened
- 2024-04-22TIBER-EU delivery capability expanded across EU member states
- 2025-09-22CREST member firm and CHECK Green Light status maintained; UK government testing pedigree continued
What 60 reviews actually say
Synthesized from G2, Capterra, Reddit, Trustpilot. Patterns >15% prevalence shown.
Praise patterns
- CREST, CHECK, STAR-FS credentials strong87% →
- Lloyds Register backing provides ownership stability71% →
- TIBER-EU red team pedigree strong64% ↑
- UK and US delivery flexibility valued51% →
Complaint patterns
- Services-led; smaller surface than crowdsourced platforms41% →
- Product / platform layer less mature than Cobalt / HackerOne38% →
- US logo coverage limited31% →
What buyers actually pay
48 anonymized deal disclosures · last updated 2026-05-01
| Company size | Median annual |
|---|---|
| Single engagement | $42,000 |
| TIBER / STAR-FS program | $240,000 |
| MSSP + PTaaS bundle | $360,000 |
Auto-verified certifications
Editorial: Strengths
- CREST member firm; CHECK Green Light; STAR-FS for Bank of England
- Lloyds Register backing provides long-term ownership stability
- Strong TIBER-EU and TIBER-style threat-led red team pedigree
- UK and US delivery teams
- Mature PCI Qualified Security Assessor capability
- Built for UK financial services and EU regulated industries
- Long delivery history since 2003
Editorial: Weaknesses
- Services-led delivery; smaller surface than crowdsourced platforms
- Product / platform layer less mature than Cobalt / HackerOne PTaaS
- Pricing opaque
- Brand recognition outside UK / EU regulated industries thinner
- US Fortune 500 logo coverage limited
Key features & integrations
- +Web app, API, mobile, network, internal pen testing
- +TIBER-EU and STAR-FS threat-led red teaming
- +CREST, CHECK, PCI QSA credentials
- +Lloyds Register backing
- +Compliance-mapped reporting (PCI, SOC 2, ISO 27001)
- +Mature retest workflow
- +Threat intelligence capability
Read our full ranking of Penetration Testing as a Service (PTaaS)
Nettitude ranks #9 in our editorial review of 10 penetration testing as a service (ptaas) platforms. The deep-dive covers methodology, comparison tables, decision matrix, migration scoring, and FAQs.
Read the full rankingClosest alternatives in Penetration Testing as a Service (PTaaS)
Contribute your verified deal price
Pricing in B2B software is opaque because vendors want it that way. Verified buyer prices fix that, anonymously. Share what you actually paid for Nettitude; we’ll add it to the verified pricing dataset on this page (with company size band only, no identifying details).
Submit anonymously