A typical penetration testing engagement in Washington, District of Columbia starts around $8,900. The figure moves with scope, not with hours — we agree it up front, so the number you see is the number you pay. No retainer creep, no surprise line items.