Penetration Testing
15 providers
Offensive security testing to identify vulnerabilities before attackers do. Includes network, web app, mobile, and social engineering assessments.
Rapid7
Boston, MA
Provides security analytics and automation solutions including InsightVM for vulnerability management and InsightIDR for detection and response.
Coalfire
Denver, CO
Leading cybersecurity advisory firm specializing in compliance, risk management, and technical testing for cloud-forward organizations.
Bishop Fox
Phoenix, AZ
Offensive security firm known for expert penetration testing, red teaming, and application security assessments.
NCC Group
New York, NY
Global cyber and software resilience company providing assurance, consulting, and managed services.
Trustwave
Chicago, IL
Singtel subsidiary offering managed security services, consulting, and threat intelligence focused on mid-market organizations.
A-LIGN
Tampa, FL
Technology-enabled compliance and cybersecurity firm specializing in SOC 2, ISO 27001, PCI-DSS, and HITRUST assessments.
Schellman
Tampa, FL
Global independent security and privacy compliance assessor specializing in SOC, ISO, PCI, and FedRAMP audits.
Synack
Redwood City, CA
Crowdsourced security testing platform combining a global network of ethical hackers with AI to deliver comprehensive pentesting.
NetSPI
Minneapolis, MN
Proactive security solutions provider specializing in penetration testing, attack surface management, and breach simulation.
Bugcrowd
San Francisco, CA
Crowdsourced cybersecurity platform offering bug bounty programs, penetration testing, and vulnerability disclosure management.
LMG Security
Missoula, MT
Cybersecurity consulting firm offering incident response, penetration testing, and training with a focus on practical, real-world security.
nVisium
Falls Church, VA
Application security consulting firm specializing in secure code review, dynamic testing, and DevSecOps transformation.
Horizon3.ai
San Francisco, CA
Autonomous penetration testing platform (NodeZero) enabling organizations to continuously find and fix exploitable attack paths.
Cyber Defense Labs
Tulsa, OK
Boutique cybersecurity firm providing penetration testing, vulnerability assessments, and security program development.
Trimarc Security
Seattle, WA
Active Directory and identity security experts providing assessments, hardening, and monitoring for enterprise environments.