Providers guide

Penetration testing providers

Compare providers by the systems they test, their testing method, and the remediation work they document. Ask for a scope that matches your actual product and customer request.

Before you choose

Questions to ask

Read the practical buying guide for a scope checklist and questions to use when comparing proposals.

Listings summarize publicly available material. Confirm capabilities, qualifications, scope, and pricing directly.

Browse the directory

Pen tester

30 listings

Service Providers

AARC-360

Assurance, advisory, risk and compliance services

United States

Provider type
  • Pen tester
  • FedRAMP
  • Compliance consulting
Credentials
  • FedRAMP 3PAO
Industries
  • U.S. federal government
  • Cloud service providers
Service Providers

Bishop Fox

Offensive security and penetration testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

BreachLock

Penetration testing and vulnerability management

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Bugcrowd

Crowdsourced penetration testing services

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Coalfire

Cybersecurity and compliance services

United States

Provider type
  • Auditor
  • Pen tester
  • FedRAMP
Industries
  • SaaS
  • Technology
Service Providers

Cobalt

Penetration testing and security testing services

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

ControlCase

Global compliance and certification services

Princeton, United States

Provider type
  • Pen tester
  • PCI DSS
  • Compliance consulting
Industries
  • United States
  • Cloud
  • Fintech
  • Healthcare
Service Providers

CyberGuard Advantage

Cybersecurity compliance and testing

Miami, United States

Provider type
  • Pen tester
  • PCI DSS
  • Compliance consulting
Industries
  • United States
  • Healthcare
  • Financial services
  • Small business
Service Providers

DataLock Consulting Group

FedRAMP & StateRAMP compliance

United States

Provider type
  • Pen tester
  • FedRAMP
  • Compliance consulting
Credentials
  • FedRAMP 3PAO
Industries
  • U.S. federal government
  • State and local government
  • Cloud service providers
Service Providers

Fortra

Security consulting and penetration testing

Minneapolis, United States

Provider type
  • Pen tester
  • PCI DSS
Industries
  • United States
  • Enterprise
  • Financial services
Service Providers

Kroll Cyber Risk

Cyber risk, investigations, and compliance services

United States

Provider type
  • Pen tester
  • GRC consultant
Industries
  • SaaS
  • Technology
Service Providers

Mandiant

Incident response and cyber risk consulting

United States

Provider type
  • Pen tester
  • GRC consultant
Industries
  • SaaS
  • Technology
Service Providers

NCC Group

Cybersecurity testing and assurance

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

NetSPI

Application and infrastructure penetration testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Nettitude

Penetration testing and security assurance

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

OffSec

Offensive security training and testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Pondurance

Penetration testing and managed security consulting

Indianapolis, Indiana, United States

Provider type
  • Pen tester
Industries
  • United States
Service Providers

Praetorian

Offensive security and penetration testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Rapid7

Security testing and risk services

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Redscan

Penetration testing and managed detection

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Secure Ideas

Application security and penetration testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

Security Innovation

Application security and penetration testing

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

SecurityMetrics

PCI compliance and security testing

Orem, United States

Provider type
  • Pen tester
  • PCI DSS
  • Compliance consulting
Industries
  • United States
  • E-commerce
  • Retail
  • Small business
Service Providers

Synack

Security testing and vulnerability discovery

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology
Service Providers

TrustedSec

Penetration testing and security consulting

United States

Provider type
  • Pen tester
  • GRC consultant
Industries
  • SaaS
  • Technology
Service Providers

TrustNet

Compliance, cybersecurity, and risk advisory services

Remote / Multiple

Provider type
  • GRC consultant
  • Pen tester
Service Providers

Trustwave

Managed security and testing services

United States

Provider type
  • Pen tester
Industries
  • SaaS
  • Technology

Browse all providers

Related categories

Keep exploring