PentesterLab
PentesterLab is a Melbourne-based, founder-owned training platform offering 700+ hands-on labs and 700+ video walkthroughs built from real-world CVEs, serving individual penetration testers, AppSec engineers, and enterprise security teams worldwide via a $199.99/year PRO subscription and an Enterprise tier.
- Company typePrivate
- Founded2011
- HeadquartersMelbourne, Australia
- Headcount1–10
- GTM typeB2C
- OfferingSoftware
What PentesterLab does
PentesterLab is a privately-held, founder-owned training platform founded in Melbourne, Australia in December 2011 and operated since full-time by Louis Nyffenegger from September 2018. It delivers hands-on education in advanced web application hacking and security code review, structured around a library of 700+ browser-accessible labs and 700+ expert-led video walkthroughs derived from 500+ real-world CVEs spanning 2014–2026. Exercises are deployed in real environments without a VPN or jumpbox, requiring users to write their own tooling and exploit vulnerabilities manually rather than replaying scripted payloads; code review coverage spans Java, Python, Go, Ruby, PHP, and TypeScript. Content is organized into 27 named badge tracks and certificates of completion, with subtitles available in 15 languages.
The business runs on a freemium model: free introductory exercises convert to a PRO annual subscription priced at $199.99, which unlocks deeper labs, video walkthroughs, and advanced exploitation content. An Enterprise tier provides shared team access, team progress reporting, and centralized billing for AppSec, pentest, and red teams. Adjacent revenue lines include Live Training (cohort-based and private sessions) and Bootcamp (a 15-week structured beginner path). The free AppSecSchool YouTube channel, a 172-term security glossary, and community presence across Discord, LinkedIn, X, Bluesky, and Mastodon form a top-of-funnel content ecosystem supporting organic acquisition. PentesterLab is used globally, from large multinational banks to specialized red teams, but the operation has remained largely solo with a small number of employees and no disclosed external funding.
PentesterLab firmographics
Firmographics- Name
- PentesterLab
- Legal name
- PentesterLab
- Website
- https://pentesterlab.com
- Company type
- Private
- Founded year
- 2011
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- PentesterLab is a Melbourne-based, founder-owned training platform offering 700+ hands-on labs and 700+ video walkthroughs built from real-world CVEs, serving individual penetration testers, AppSec engineers, and enterprise security teams worldwide via a $199.99/year PRO subscription and an Enterprise tier.
- Ownership category
- akta.pro rank
PentesterLab industry classification
Industry- Product category
- Cybersecurity Training
- NAICS
- Exam Preparation and Tutoring (611691)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Secure Software & DevOps Awareness (Secure Coding Basics) (EDABAGAN)
- akta.pro secondary industries
- Penetration Testing & Red Teaming (BPAKAHAF), Penetration Testing & Red Teaming (BPAKADAE), Vulnerability Management & Penetration Testing Services (BPAEADAD)
Keywords
Where PentesterLab is headquartered
LocationHeadquarters
- HQ city
- Melbourne
- HQ country
- Australia
- HQ region
- Oceania
Offices1 record
Markets served
PentesterLab business model
Business model- GTM type
- B2C
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- PRO Subscription: Annual subscription at $199.99/year providing access to 700+ hands-on labs, 700+ video walkthroughs, and advanced exploitation and code review content.
- PentesterLab Enterprise: Team subscriptions with shared access to full library, team progress reporting, and centralised billing for AppSec, pentest, and red teams.
- Live Training: Live, cohort-based training in advanced web hacking and security code review, available for individual practitioners and private sessions for organisations.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Others | Free Tier - Online Free Labs |
| Subscription | Annual | PRO - Annual Subscription |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels8 records
PentesterLab product offering
Product offeringCore offering
PentesterLab is a hands-on training platform for advanced web hacking and security code review. It delivers 700+ exercises built around real-world CVEs and exploitation patterns, paired with 700+ expert-led video walkthroughs that explain the vulnerability, exploit, and fix. The platform also covers in-depth security code review across multiple programming languages and frameworks, accessible via a free tier or a $199.99/year PRO subscription, with an Enterprise tier for teams.
Product overview
PentesterLab is a hands-on training platform for advanced web hacking and security code review. It consists of a core platform (pentesterlab.com) offering 700+ labs and 700+ video walkthroughs built around real-world CVEs, supplemented by Pro (paid tier at $199.99/year for deeper content), Enterprise (team tier with shared access and reporting), Live Training (cohort-based sessions), Bootcamp (15-week structured beginner path), AppSecSchool (free YouTube-based video content), and a Security Glossary (172-term reference resource). Progress is tracked via named badges and certificates of completion across 27 learning tracks. The platform is non-gamified, avoids certifications/exams, and uses real environments without a VPN or jumpbox.
Differentiator
Problem solved
Functional benefit
Brands
- AppSecSchool: Free video content covering AppSec processes, career tips, and technical deep dives.
- PentesterLab Bootcamp
- PentesterLab Enterprise
Products and services
- PentesterLab PRO Annual subscription at $199.99/year providing individual access to 700+ hands-on labs, 700+ expert-led video walkthroughs, and advanced exploitation and security code review content. Targeted at individual penetration testers, bug bounty hunters, and security engineers.
- PentesterLab Enterprise Team subscription providing shared access to the full exercise and video library for security teams, with team progress reporting and centralized billing. Used by global banks, technology companies, and specialized red teams to upskill AppSec, pentest, and red teams on web hacking and code review.
- Live Training Live, cohort-based training sessions in advanced web hacking and security code review, available to individual practitioners enrolling directly and to organizations arranging private or tailored sessions for their teams.
- PentesterLab Bootcamp A 15-week structured beginner path covering Linux, scripting, HTTP, PHP, DNS, SQL injection, SSL/TLS, and web exploitation, guiding new learners from foundational concepts to intermediate-level web exploitation skills.
Quantifiable outcome
- 8334+ students completed From SQL Injection to Shell exercise
- +2 more outcomes
Companies that use PentesterLab
Customer profileNamed customers5 records
Segments4 records
Ideal customer profiles2 records
PentesterLab technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
PentesterLab partnerships and signals
Strategic signalScale indicators7 records
Recent moves6 records
Expansion highlights5 records
PentesterLab competitors and assessment
Company assessmentMarket position
Competitive moat4 records
Key highlights7 records
Customer concentration
PentesterLab social profiles
Digital presencePentesterLab financial estimates
Financial estimateRevenue estimate
Valuation estimate
PentesterLab leadership team
Management profileNumber of profiles
Profiles1 record
PentesterLab funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
PentesterLab M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about PentesterLab
What does PentesterLab do?
PentesterLab is a hands-on training platform for advanced web hacking and security code review. It delivers 700+ exercises built around real-world CVEs and exploitation patterns, paired with 700+ expert-led video walkthroughs that explain the vulnerability, exploit, and fix. The platform also covers in-depth security code review across multiple programming languages and frameworks, accessible via a free tier or a $199.99/year PRO subscription, with an Enterprise tier for teams.
Is PentesterLab a public or private company?
PentesterLab is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was PentesterLab founded?
PentesterLab was founded in 2011. It employs 1 to 10 people.
Where is PentesterLab based?
PentesterLab is headquartered in Melbourne, Australia, in the Oceania region.
How does PentesterLab make money?
Three revenue lines are on record. PRO Subscription is the primary driver. The others are pentesterLab Enterprise and live Training.
Does PentesterLab have an API?
No public API is recorded for PentesterLab.
What industry is PentesterLab in?
PentesterLab's product category is Cybersecurity Training. Its primary akta.pro industry code is EDABAGAN, Secure Software & DevOps Awareness (Secure Coding Basics), with a secondary code of BPAKAHAF, Penetration Testing & Red Teaming. Its NAICS code is 611691 and its SIC code is 7372.