Pentest pricing in Chile (2026)

A scoped web or API pentest starts at 25 UF + VAT. Startup, infrastructure, and broader scopes are quoted from the scope. We do not publish a CLP figure we have not closed in a diagnosis.

Quote in 24 h

onenorma · Chile · hola@onenorma.com

Ranges by type

Reference pentest pricing in Chile, in UF plus VAT. Where no floor is published, the figure comes from the scope.
Type	Range	What it covers
Web app	From 25 UF + VAT	One web application, gray box, with a report and a mitigation plan.
API	From 25 UF + VAT	A limited set of APIs. The same floor as a scoped web app.
Startup	Based on scope	An SME or startup in the Santiago Metropolitan Region does not have a separate published price. If the scope fits one web app or a limited API set, the 25 UF floor applies. Several surfaces are quoted.
Infrastructure	Based on scope	Network, cloud, or several environments. The calendar and the amount go in the proposal, after the diagnosis.

What changes the price

The 25 UF floor covers a scoped engagement. The price goes up, or is quoted separately, when one of these conditions changes.

Number of applications, APIs, or environments.
Black, gray, or white box, and whether code or architecture is in scope.
Infrastructure, mobile, or a retest after mitigation.
AI pentesting (chatbot, agent, or MCP). It is not part of the web or API floor.

What the report includes

The deliverable is not a scanner list. It is evidence leadership and engineering can use.

An executive report for people who will not read the technical detail.
A technical report with reproducible evidence per finding.
Prioritization by severity and business impact.
A retest when the scope includes it, after the team mitigates.

Timelines

The quote goes out within 24 hours. The initial diagnosis takes 30 minutes and has no cost. The work calendar is set in the proposal: we do not publish a single duration because it depends on the scope.

The method is on the pentesting service in Chile. For the team and compliance, the page is cybersecurity company in Chile.

Frequently asked questions

How much does a web pentest cost in Chile?: A scoped gray-box web pentest starts at 25 UF + VAT. It includes offensive testing, an executive report, reproducible evidence, and a mitigation plan. Several applications or a broad retest are quoted separately.
How much does a pentest cost for a startup in Chile?: There is no startup price separate from a web or API pentest. If the scope is one application or a limited set of APIs, the floor is 25 UF + VAT. If the startup has several surfaces or infrastructure, we quote after a 30-minute diagnosis.
What does the pentest report include?: An executive report, a technical report with reproducible evidence per finding, and prioritization by business impact. The retest is included when the scope says so, after mitigation.
How fast do you send the quote?: Within 24 hours. Before that, the initial diagnosis takes 30 minutes and has no cost. The timeline of the work itself is in the proposal, because it depends on the scope.
Is the price in CLP or UF?: The published floor is in UF: from 25 UF + VAT for a scoped web or API pentest. We do not publish a CLP equivalent because the UF is adjusted. Scopes marked “based on scope” have no number until the diagnosis.

Ranges by type

Reference pentest pricing in Chile, in UF plus VAT. Where no floor is published, the figure comes from the scope.
Type	Range	What it covers
Web app	From 25 UF + VAT	One web application, gray box, with a report and a mitigation plan.
API	From 25 UF + VAT	A limited set of APIs. The same floor as a scoped web app.
Startup	Based on scope	An SME or startup in the Santiago Metropolitan Region does not have a separate published price. If the scope fits one web app or a limited API set, the 25 UF floor applies. Several surfaces are quoted.
Infrastructure	Based on scope	Network, cloud, or several environments. The calendar and the amount go in the proposal, after the diagnosis.

What changes the price

The 25 UF floor covers a scoped engagement. The price goes up, or is quoted separately, when one of these conditions changes.

Number of applications, APIs, or environments.

Black, gray, or white box, and whether code or architecture is in scope.

Infrastructure, mobile, or a retest after mitigation.

AI pentesting (chatbot, agent, or MCP). It is not part of the web or API floor.

What the report includes

The deliverable is not a scanner list. It is evidence leadership and engineering can use.

An executive report for people who will not read the technical detail.

A technical report with reproducible evidence per finding.

Prioritization by severity and business impact.

A retest when the scope includes it, after the team mitigates.

Timelines

Frequently asked questions

How much does a web pentest cost in Chile?

A scoped gray-box web pentest starts at 25 UF + VAT. It includes offensive testing, an executive report, reproducible evidence, and a mitigation plan. Several applications or a broad retest are quoted separately.

How much does a pentest cost for a startup in Chile?

There is no startup price separate from a web or API pentest. If the scope is one application or a limited set of APIs, the floor is 25 UF + VAT. If the startup has several surfaces or infrastructure, we quote after a 30-minute diagnosis.

What does the pentest report include?

An executive report, a technical report with reproducible evidence per finding, and prioritization by business impact. The retest is included when the scope says so, after mitigation.

How fast do you send the quote?

Within 24 hours. Before that, the initial diagnosis takes 30 minutes and has no cost. The timeline of the work itself is in the proposal, because it depends on the scope.

Is the price in CLP or UF?

The published floor is in UF: from 25 UF + VAT for a scoped web or API pentest. We do not publish a CLP equivalent because the UF is adjusted. Scopes marked “based on scope” have no number until the diagnosis.