diff --git a/documentation/security/pen-test-plan.md b/documentation/security/pen-test-plan.md
index 81b164f3..e9437d27 100644
--- a/documentation/security/pen-test-plan.md
+++ b/documentation/security/pen-test-plan.md
@@ -1,5 +1,13 @@
 # White-Hat Penetration Test — Plan & Engagement (TRU-80)
 
+> ## ⛔ CANCELLED — DO NOT EXECUTE
+> **Status:** Cancelled 2026-08-16 by Jeppe Bundgaard
+> **Reason:** No budget approved at this time. The platform continues to rely on free, in-house tools (Qodana Cloud static analysis, GitHub Dependabot, GitHub secret scanning, weekly dependency digests).
+> **What this means:** No external pen-test firm is being engaged. This document is kept as a planning artifact for future reference. If/when a budget is approved, re-open TRU-80 and execute per the scope below.
+> **Owner:** Jeppe Bundgaard (jeppe@copenhagentruckwash.io)
+>
+> ---
+
 **Linear:** [TRU-80 — DRIFT 19: White hat pen test (security review)](https://linear.app/truck-wash-aps/issue/TRU-80/drift-19-white-hat-pen-test-security-review)
 **Project:** UI Library & Pen Testing
 **Priority:** Medium