Comparison
Pentest-Tools.com vs. HostedScan
Pentest-Tools.com is a toolbox for people who run pentests. HostedScan is a monitoring platform for teams that need continuous scanning between them, with health scores, a risk lifecycle, and alerts on new findings.
Try the Premium plan free for 14 days. No credit card required.
At a glance
HostedScan
Pentest-Tools.com
Starting price
$468 / year, 5 targets
$95 to $190 / month
Scanners
OpenVAS, Nuclei, ZAP, Nmap, SSLyze; Nessus on Professional
Own scanner plus 20+ tools
Internal scanning
Included from Premium
VPN agent add-on
Trial
14 days, no card
Free plan, 5 assets
Differences
What sets HostedScan apart from Pentest-Tools.com
Monitoring between pentests
Health scores, risk lifecycle, and alerts on new findings. Pentest-Tools.com centers on running a tool and getting a report.
Nessus in the platform
Professional includes Tenable Nessus for external, internal, and agent scanning. Pentest-Tools.com uses its own network scanner.
Price that flattens with scale
Per-target rates drop to $1 per month billed annually past 100 targets. Pentest-Tools.com prices in asset bands per plan.
One risk list for every source
Import Dependabot, Snyk, and your own scanner output into the same list you triage. Pentest-Tools.com keeps findings inside each tool's results.
Inside the product
What you get on day one
Each risk carries first and last detected dates, so a scheduled scan tells you what is new, what is fixed, and what is still open.
Which one fits
Choose HostedScan if
- You want scheduled scans and alerts only on what changed.
- You need a risk list with owners, accepted risks, and a health score.
- You want Tenable Nessus alongside the open-source scanners.
- You are an MSP and need client workspaces and white-label reports.
Choose Pentest-Tools.com if
- You run manual pentests and want exploitation, fuzzing, and recon tools.
- You need a pentest report generator for client deliverables.
- You want a free tier with a few assets and no time limit.
- You want many individual tools rather than one scheduled scanning platform.
Capability matrix
Feature by feature
Differences come first. A half circle marks a limited capability, and its note names the limit. Notes about Pentest-Tools.com link to their source.
Feature
Scanners
Tenable Nessus
Nessus cloud scanning, Nessus scanners for internal networks, and Nessus Agents, all on Professional.
Uses its own network vulnerability scanner.
SourceGreenbone OpenVAS
Greenbone OpenVAS and Nuclei CVE scanning plus Nmap TCP and UDP port scans on every plan, and Tenable Nessus on Professional.
Proprietary network scanner.
SourceExploitation tools
No exploitation tools. Findings ship with evidence and remediation steps.
SQLi and XSS exploiters and an auto-exploiter on the Pentest Suite plan.
SourceCoverage
Web application scanning
OWASP ZAP active and passive scanning for the OWASP Top 10 and beyond.
DAST scanning starts on WebNetSec, the second plan.
SourceAPI scanning from a spec
Import an OpenAPI or Swagger spec and ZAP tests every endpoint.
SourceAPI scanner on WebNetSec and above.
SourceInternal network scanning
An internal scanner runs inside your network on Premium. Nessus scanners and Nessus Agents on Professional.
SourceInternal scanning through a VPN agent is an optional add-on.
SourceCloud and Kubernetes scanning
No cloud configuration checks. Cloud accounts are connected only to import targets.
Cloud scanner and Kubernetes scanner.
SourceReporting and risk management
Risk lifecycle with owners and acceptance
Accept, remediate, and track every finding with CVSS and EPSS scores and a QoD threshold to cut false positives.
SourceFindings management exists; the product is organized around tools and scan results.
SourceHealth score over time
A health score per target and per account, trended over time.
No target or account score.
SourcePentest report generator
Automated scanning only. No human pentest, no certificate.
Pre-filled executive summary, findings, and remediation in DOCX, PDF, or HTML.
SourceWhite-label reports
White-label PDF reports with your branding on Professional.
Branded reports and emails are an add-on.
SourceImport results from other scanners
Connect GitHub Dependabot and Snyk, and upload Nmap, OpenVAS, or ZAP results through the API.
SourceImports Burp Suite findings on the Pentest Suite plan.
SourceIntegrations and API
SAML SSO
SAML SSO, access controls, and workspaces on Professional.
SourceSSO is not listed on the published plans.
SourceLicensing, pricing, and support
Free tier
No free plan. A free scan of one target and a 14-day Premium trial instead.
Free plan with up to 5 assets and limited scanning.
SourceMSP and reseller program
MSP program with workspaces, white-label reports, and reseller pricing.
Unlimited workspaces from NetSec. Branded reports and emails are an add-on.
SourceHow the two products run
External scanning
Cloud scanners on a schedule you set once.
Cloud tools you launch, schedule, or chain with Pentest Robots.
Internal scanning
Internal scanner on Premium; Nessus scanners and Nessus Agents on Professional.
VPN agent add-on that tunnels tools into the network.
Scanner upkeep
HostedScan maintains the scanners and syncs the Greenbone feed daily.
Pentest-Tools.com maintains its scanners.
Where data lives
HostedScan cloud with export and API.
Pentest-Tools.com cloud with export and API.
What your team does weekly
Read the alert, fix or accept, watch the health score.
Pick a tool, run it, read the report.
Pricing example
5 targets with web, API, and network scanning and authenticated scans
One scenario priced on both products. HostedScan totals come from the published plan and per-target rates. Pentest-Tools.com figures were checked in September 2026 and link to the source.
HostedScan Premium
$1,308 / year
$109 per month billed annually. 5 targets included.
Premium includes ZAP web and API scanning with authentication, OpenVAS and Nuclei network scanning, Nmap, SSLyze, the internal scanner, and the API.
Pentest-Tools.com
From $140 / month
WebNetSec at 5 assets, billed monthly, which is where DAST and API scanning start. $1,680 per year before the annual discount.
From our customers
What our customers say
“I found your platform to be best-in-class for automated vulnerability assessment and reporting. I've already started suggesting it to other software teams.”
Orane Cole • Founder & CEO
“We are a small charity and every dollar counts. I contacted their customer service team and asked if they had an option that would meet our needs. They understood our requirements and provided a solution that was an excellent fit. They have a fantastic product, but what makes them stand head and shoulders above the rest is their customer service.”
“As a SaaS company we are constantly at risk of cyberattacks, therefore an effective vulnerability scanner is a critical component of our information security toolkit. After an extensive search for an alternative solution, we found HostedScan and decided to give it a try. We are glad we did.”
Paolo Losi • CEO at Enuan
Quick Answers
Frequently asked questions
Our knowledge base contains answers to technical questions, and you can always contact us for more details on our plans, pricing, or any questions.
Speed and power,
without the complexity
The world's leading vulnerability scanners, all in one platform.