Section 01 · Public Positioning
How NetSPI positions publicly
NetSPI positions itself as the category leader in PTaaS (penetration testing as a service), with the Resolve platform, an attack-surface management product, and a large global delivery bench. It took a majority investment from KKR in 2022, per its own announcements, and positions the recurring platform as the core of its model.
Section 02 · Market Read
Where NetSPI actually plays
NetSPI's product is the workflow. The Resolve platform tracks findings, status, retests, and integrations across multiple engagements over time. The underlying testing is real, but the buying motion is built around the platform as the durable, recurring asset, with operator hours scoped against it. The economics work when you have many parallel engagements and want one pane of glass; they get heavy when you have one annual pentest and a workflow you now have to staff and maintain.
Section 03 · Where We Fit
Where Alacrinet sits next to them
We do not sell a platform and do not want to. The deliverable is the report, the readout, and the operator's continued availability for retest. If you already run a portfolio program with continuous testing across dozens of assets, NetSPI's workflow has genuine value. If you run one to four engagements a year and want the depth to actually move the needle, the platform overhead is friction you are paying for and not using.
Section 04 · Side By Side
Side by side, on the dimensions that actually separate us
| Dimension | Alacrinet | NetSPI |
|---|---|---|
| 01 What you are actually buying | Operator time, a report, and an executive readout. | Resolve platform access plus operator time, sold as a subscription pattern. |
| 02 Best fit by program shape | One to a handful of deep engagements per year. | Continuous, portfolio-scale testing across many assets. |
| 03 Operator continuity | The operator who scopes runs the test and signs the report. | Delivery pulled from a large bench; consistency varies by region and engagement. |
| 04 Pricing model | Fixed fee per engagement, no platform seat fee. | Platform subscription plus per-engagement fees. |
| 05 Retest mechanism | Unlimited and untimed, in the SOW. | Platform-based retest workflow; cadence governed by contract. |
Section 05 · Buyer-Side Honesty
When each firm is the right pick
When NetSPI is the right pick
- You run a continuous testing program across many assets and need workflow tooling to manage findings at scale.
- You have a multi-region footprint and want global delivery capacity inside one vendor.
- Your security org has the bandwidth to own a platform relationship, including integrations and user management.
When Alacrinet is the right pick
- You buy pentesting as scoped engagements, not as a platform subscription.
- You want a named senior operator on the work, not assignment from a delivery pool.
- You do not want a SaaS seat line item attached to your testing budget.
- You want depth on a small number of engagements rather than breadth across many.
Section 06 · The Tiebreaker
How to decide without a bake-off
Send the twelve-question checklist to both firms and require written answers in the proposal. The answers will sort the fit faster than a demo or a sample report. If NetSPI is the right call for your scope, the checklist will say so. If we are, the same checklist will say that too.
Section 07 · Frequently Asked
Frequently asked questions
Q1 Do you offer a portal for findings tracking?
We deliver findings in the report, in a CSV or JSON export on request, and through whatever ticketing system you already use (Jira, ServiceNow, GitHub). We do not require you to log into our portal to see your own data.
Q2 Can you handle continuous testing if we want it?
Yes, structured as recurring scoped engagements rather than as a platform subscription. The pricing reflects the work, not a per-seat fee.
Q3 What about PTaaS for compliance auditors?
Auditors accept our reports for SOC 2, PCI, HIPAA, CMMC, and ISO 27001. The deliverable format is what they actually review, not the platform it lives in.