Platforms and services that simulate adversarial attacks to identify security vulnerabilities before real attackers exploit them.
Penetration Testing
Commercial penetration testing platform by Fortra providing multi-vector automated and manual testing.
Price position$788 / month
Price position: at the category median.Bug Bounty Platforms
HackerOne provides a bug bounty platform connecting organizations with ethical hackers to find and fix security vulnerabilities.
Price position$1,667+ / month
Starting price: above the category median.Penetration Testing as a Service
Horizon3.ai provides autonomous penetration testing that continuously finds and verifies exploitable attack paths in enterprise environments without manual effort.
Price position$2,084+ / month
Starting price: above the category median.Penetration Testing
Pentest-Tools.com provides a cloud-based platform for automated penetration testing with vulnerability scanning, attack surface discovery, and reporting tools.
Price position$49+ / month
Price position: below this category's displayed range.Penetration Testing
Synack provides a premium penetration testing platform that combines human intelligence from vetted researchers with AI-enabled technology for continuous security testing.
Price position$1,334+ / month
Starting price: above the category median.Breach and Attack Simulation
Advanced adversary simulation platform used by red teams and penetration testers to emulate real-world threat actor behavior and test defenses.
Price position$492 / user / month
Price position: below the category median.Attack Surface Management
Detectify provides external attack surface management powered by a crowdsourced network of ethical hackers who discover vulnerabilities in web applications.
Price position$275+ / month
Starting price: below the category median.Security Compliance
Oneleet is a compliance automation platform focused on SOC 2 that combines automated evidence collection, policy generation, and penetration testing in one platform.
Price position$834+ / month
Starting price: above the category median.Dynamic Application Security Testing
Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.
Price position$500+ / month
Starting price: below the category median.Penetration Testing as a Service
Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.
PricingPricing unavailable
Network Security
Free and open-source utility for network discovery and security auditing used by millions.
PricingPricing unavailable
Vulnerability Management
Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.
PricingPricing unavailable
Attack Surface Management
Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.
PricingContact sales
Attack Surface Management
Offensive security company providing continuous threat exposure management through automated penetration testing and attack surface analysis.
PricingContact sales
API Security
Automated API security testing platform providing continuous discovery and penetration testing of API endpoints throughout the development lifecycle.
PricingPricing unavailable
Bug Bounty Platforms
YesWeHack is a European bug bounty and vulnerability disclosure platform that connects organizations with ethical hackers to improve cybersecurity through crowdsourced testing.
PricingContact sales
Penetration Testing
Pentera provides automated penetration testing that continuously validates security controls by safely emulating real-world attack techniques.
PricingContact sales
Bug Bounty Platforms
Bugcrowd provides crowdsourced security testing with bug bounty programs, pen testing, and vulnerability disclosure through vetted researchers.
PricingContact sales
