Skip to content

Provider of Professional Penetration Testing in Germany

Use our configurator to easily create a tailored penetration testing quote with clear, upfront pricing. It’s free and there’s no obligation. Afterwards, our OSCP-certified experts will advise you personally and conduct the penetration test once commissioned. Full cost control and transparency from the start.

Configurator

With the configurator, you can tailor penetration tests to your specific needs while maintaining full control over costs.

Request an offer

Approach

We adhere to industry standards and offer a hassle-free ordering process with a fixed-price guarantee.

Learn more

Qualification

We only use our own employees during pentests, all of whom hold advanced certifications such as OSCP.

Learn more

About us

Pentest Factory is a brand of tacticx GmbH and specialises in penetration tests, as well as security assessments.

Learn more

Not sure which penetration test you need?
Simply use our ScopeBot AI Chat that suggests fitting pentests from our configurator.

Why Penetration Testing?

Cyberattacks are becoming more sophisticated every day. A penetration test shows you where your company is vulnerable before hackers do.

Identify vulnerabilities

A penetration test allows you to identify vulnerabilities and potential points of attack, as well as verify whether your existing security measures would actually be effective in the event of a real-world attack.

Strengthening IT resilience

Regular penetration tests enhance the resilience of your IT infrastructure, applications, and employees against real-world attack vectors.

Concrete actions instead of lengthy reports

You’ll receive prioritized, actionable recommendations for addressing vulnerabilities. No generic PDF. Just clear next steps for your team.

Proof of compliance

Penetration tests provide documented proof of security compliance for regulatory requirements, customer audits, and certifications such as NIS2, DORA, and ISO 27001.

Current news & specialist articles

Securing Active Directory: Attack Vectors, Hardening & Penetration Testing 2026

  • Specialist article
How Attackers Become Domain Administrators in Active Directory—and How to Prevent It. An Overview of Attack Vectors, BSI-Compliant Hardening, and the AD Penetration Test.

Our new Pentest Configurator 2.0 is live

  • News
Over the past few weeks, Pentest Factory GmbH has developed a new configurator for creating a penetration test quote, which is now available on our website. User-friendliness and transparency were

In 4 Steps: Choosing the Right Penetration Test for Your Company

  • Specialist article
Find out which penetration test is right for your company: ISO 27001, TISAX, web applications, APIs, AI services, or assume-breach scenarios. A clear explanation of black-box, gray-box, and white-box penetration

Expansion of the Executive Board

  • News
Mr. Laurent Vetter has served as CEO of Pentest Factory GmbH since February 24, 2026. Mr. Vetter has been with Pentest Factory for nearly seven years and previously served as

COM Hijacking

  • Specialist article
COM hijacking is often used after a system has been successfully compromised and provides attackers with an effective way to maintain persistent access. This technique can execute malicious code undetected

ClickFix & FileFix: The Underestimated Threat in Social Engineering

  • Specialist article
Technical vulnerabilities are often the focus of IT security—but the biggest point of vulnerability remains the human factor. Two recent methods show just how easy it is to bypass security

How an Initial SQL Injection Led to Research on URL Normalization and mod_rewrite

  • Specialist article
The article explores how an SQL injection security analysis led to a more in-depth examination of URL normalization and the Apache mod_rewrite module. It explains how mod_rewrite can redirect different

vaulticx – Transfer data easily. But secure!

  • News
Secure communication on the Internet doesn't have to be complicated. The vaulticx platform from our sister company, tacticx Development GmbH, combines ease of use and maximum security in a single

5 errors in pentest results

  • Specialist article

Especially for companies that operate larger infrastructures, a pentest can often provide more insights than is typically assumed. We show you how to interpret pentest results correctly and get the

Zeichenflaeche 1 1

Berlin

Geldern

Frankfurt

We are here for you

Our locations

Pentest Factory GmbH is located on three sites in Germany – Geldern am Niederrhein (Headquarters), Berlin, as well as Frankfurt am Main.

From these locations we organise your penetration tests. As a client you benefit from quick response times and cheap travel expenses for on-premise tests.

Many pentests can be conducted remotely. We hereby use our own infrastructure and technology. If you desire, we conduct a final project meeting on-premises at your company.