Nebula vs Intruder: which AI pentest fits your team?
Nebula and Intruder both offer AI-led security testing, but they are priced differently. Intruder sells AI web application pentests per test, from $3,500, alongside scanning plans and a free tier. BreachLine's Nebula is a monthly plan from £399 that covers web, API, network and cloud testing using credits, built for small and mid-sized teams.
What's the short verdict?
Choose Intruder if you want an established vulnerability scanning platform with a free tier, plus per-test AI pentests and manual pentests delivered by its CREST-certified team. Choose Nebula if you are one of the small and mid-sized teams that want an AI security testing engineer on a fixed monthly plan, testing and retesting as your systems change.
How do Nebula and Intruder compare?
Verified on 16 October 2026 from breachline.io/pricing and intruder.io. Prices change, so check both pages before you decide.
| Comparison | Nebula (BreachLine) | Intruder |
|---|---|---|
| What it is | An AI security testing engineer with validated proof | A vulnerability scanning platform with AI pentests and penetration testing services |
| Pricing model | Monthly plan with included credits | Free tier and scanning plans; AI pentests priced per test |
| Entry price | £399 a month (Individual, 400 credits) | Free tier; AI web app pentests from $3,500 per test |
| Other plans | Team £899 a month, Business £2,299 a month, Enterprise £199 per seat per month (minimum five seats), credits billed separately | Cloud, Pro and Enterprise scanning plans |
| Testing scope | Web, API, network and cloud testing using credits; mobile on supported connected devices | Infrastructure, cloud and container scanning; authenticated web app and API scanning; AI web app pentests |
| How findings are evidenced | Findings are validated, with evidence and reproduction steps; safe exploit proof where a flaw can be exploited | AI agents validate findings against the live app (Intruder help centre) |
| Retests | Retests use credits | AI pentest retests included at no extra cost, unlimited (Intruder help centre) |
| Human involvement | Human sign-off on findings is available when a client requests it | Manual pentests by its CREST-certified team available |
| Company | BreachLine Labs Limited, London | Intruder |
| Cyber Essentials | Cyber Essentials certified (certification body CDS Defence & Security), whole organisation, certified 20 Aug 2026, valid to 20 Aug 2027. Verify | Holds Cyber Essentials (Intruder help centre) |
How does pricing compare: monthly plan or per test?
The two products charge in different ways, so compare them on how often you plan to test.
Intruder's pricing page lists AI-powered web application pentests starting from $3,500 per test. Separately, it offers a free tier and paid Cloud, Pro and Enterprise scanning plans, with a 14-day free trial of the Cloud plan. Intruder prices its Cloud and Pro plans as a base fee plus a fee per target.
BreachLine's plans are monthly, with credits included. See How do credits work?
If you need one web application tested once a year, a per-test fee may suit you. If your applications change monthly and you want to test after each release, a monthly plan spreads the cost and keeps the testing current. For wider market context, see our penetration testing cost guide.
One practical point: Intruder's per-test price is in US dollars, while BreachLine prices in pounds. If you budget in sterling, factor in exchange rates when you compare. Also compare what each price includes. Ask both providers how reports, retests and additional targets are charged, so you are comparing the full cost, not only the headline figure.
What does each test, and how are findings proved?
Intruder describes itself on its own pages as scanning external infrastructure (IPs, websites, servers, container images and cloud assets) for misconfigurations and exposed services, plus authenticated dynamic application security testing on web apps and APIs. Its AI pentesting page says its pentesting agents were built and trained by its CREST-certified pentesters, and its help centre says the agent validates findings against the live app. Intruder also offers manual web application penetration testing conducted by its CREST-certified team.
Nebula works more like an engineer you brief. See How Nebula works and What comes as standard.
Both providers require that you are authorised to test the targets. BreachLine requires written authorisation for the scope before testing starts.
How do retests work?
With Nebula, you ask your engineer to verify a fix and it retests. Retests use credits, like other AI work. See Do retests use credits?
Intruder's help centre states that retesting is included with each AI Full Pentest at no extra cost, with no limit on the number of retests. A retest rechecks only the findings you select from the most recent report and produces its own report (Intruder help centre, checked 16 October 2026).
When is Intruder the better choice?
Intruder is likely the better fit if:
- You want a free tier or low-cost automated vulnerability scanning across a lot of infrastructure, containers and cloud accounts.
- You want a single, established vendor that also offers manual penetration testing by a CREST-certified team.
- You need internal agent-based scanning of servers and staff devices, which Intruder lists on its Pro and Enterprise plans.
- You only need an occasional, one-off AI web app pentest and prefer a per-test fee.
- You rely on its integrations with compliance and ticketing tools.
When is Nebula the better choice?
Nebula is likely the better fit if:
- You are one of the small and mid-sized teams that want a predictable monthly cost.
- Your systems change often, and you want to test and retest as you ship, not once a year.
- You want one AI security testing engineer covering web, API, network and cloud testing within your approved scope.
- You prefer pricing in pounds from a company that is London-based, working with teams worldwide.
FAQ
Is Nebula cheaper than Intruder?
It depends on how often you test. Intruder's AI web app pentests start from $3,500 per test. Nebula plans start at £399 a month, and a small test of one or two assets usually fits that plan.
Does Intruder have a free plan?
Intruder's pricing page lists a free tier and a 14-day free trial of its Cloud plan.
Are Nebula retests free?
No. Retests use credits, like other AI work.
Does Nebula replace a CREST pentest?
No. Where a contract, insurer or regulator requires an accredited report, use an accredited provider. Nebula is for testing between those tests.
Can I try Nebula?
There is no self-serve free trial. Book a 30-minute demo on your own assets.