Penetration Testing

Cobalt

AI Software Testing

Cobalt provides Pentest as a Service combining a vetted community of pentesters with a SaaS platform for on-demand security testing.

Core Impact

Penetration Testing

Commercial penetration testing platform by Fortra providing multi-vector automated and manual testing.

HackerOne

Vulnerability Management Platforms

HackerOne provides a bug bounty platform connecting organizations with ethical hackers to find and fix security vulnerabilities.

nmap

Penetration Testing

Free and open-source utility for network discovery and security auditing used by millions.

Horizon3.ai

Penetration Testing

Horizon3.ai provides autonomous penetration testing that continuously finds and verifies exploitable attack paths in enterprise environments without manual effort.

Qualys

Dynamic Application Security Testing

Qualys provides cloud-based vulnerability management and web application scanning that helps organizations identify and prioritize security risks across their attack surface.

Bishop Fox

Code Security Scanning

Bishop Fox provides continuous attack surface management and offensive security testing through its Cosmos platform and expert consultants.

Praetorian

Attack Surface Management

Offensive security company providing continuous threat exposure management through automated penetration testing and attack surface analysis.

Pentest-Tools.com

Penetration Testing

Pentest-Tools.com provides a cloud-based platform for automated penetration testing with vulnerability scanning, attack surface discovery, and reporting tools.

APIsec

Penetration Testing

Automated API security testing platform providing continuous discovery and penetration testing of API endpoints throughout the development lifecycle.

YesWeHack

Penetration Testing

YesWeHack is a European bug bounty and vulnerability disclosure platform that connects organizations with ethical hackers to improve cybersecurity through crowdsourced testing.

Pentera

Vulnerability Management Platforms

Pentera provides automated penetration testing that continuously validates security controls by safely emulating real-world attack techniques.

Bugcrowd

Vulnerability Management Platforms

Bugcrowd provides crowdsourced security testing with bug bounty programs, pen testing, and vulnerability disclosure through vetted researchers.

Hadrian

Attack Surface Management

Offensive security platform combining automated reconnaissance, attack surface mapping, and risk-based vulnerability prioritization.

PlexTrac

Vulnerability Management Platforms

Purple teaming and security assessment platform streamlining pentest reporting, collaboration, and remediation tracking for security teams.

Synack

Penetration Testing

Synack provides a premium penetration testing platform that combines human intelligence from vetted researchers with AI-enabled technology for continuous security testing.

Metasploit

Dynamic Application Security Testing

Rapid7's open-source penetration testing framework with thousands of exploits and auxiliary modules.

Cobalt Strike

Penetration Testing

Advanced adversary simulation platform used by red teams and penetration testers to emulate real-world threat actor behavior and test defenses.

Detectify

Dynamic Application Security Testing

Detectify provides external attack surface management powered by a crowdsourced network of ethical hackers who discover vulnerabilities in web applications.

Rootshell Security

Penetration Testing

Penetration testing and vulnerability management platform providing threat-led assessments.

NetSPI

Attack Surface Management

Proactive security platform providing attack surface management, penetration testing as a service, and breach and attack simulation.

Intigriti

Penetration Testing

Intigriti provides a European bug bounty and security testing platform with triage services and a curated community of ethical hackers.

Oneleet

Workflow Automation

Oneleet is a compliance automation platform focused on SOC 2 that combines automated evidence collection, policy generation, and penetration testing in one platform.

Offensive Security

Penetration Testing

Cybersecurity training and certification platform providing OSCP, OSCE, and hands-on pentest courses.

Theori

Penetration Testing

Offensive cybersecurity consulting firm with research and services

Invicti

Dynamic Application Security Testing

Invicti provides automated web application security testing that combines DAST and IAST approaches for comprehensive vulnerability detection with proof-based scanning.

BreachLock

Penetration Testing

Pentesting-as-a-service platform combining AI automation with certified ethical hackers for continuous PTaaS.

ImmuniWeb

Dynamic Application Security Testing

AI-driven ASM and application security testing

Yogosha

Vulnerability Management Platforms

Yogosha provides a vulnerability operations platform combining bug bounty programs, pentesting-as-a-service, and vulnerability disclosure for European enterprises.

Rhino Security Labs

Penetration Testing

Penetration testing services firm specializing in cloud, network, and application security assessments with a focus on AWS exploitation.

PurpleBox

Penetration Testing

Managed cybersecurity services provider offering penetration testing, vulnerability management, and compliance.

Packetlabs

Penetration Testing

Boutique penetration testing and offensive security firm providing bespoke pentests across industries.

Secarma

Penetration Testing

UK-based cybersecurity services provider offering penetration testing, red teaming, and consultancy.