Halo Security

What the company sells

Halo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers.

Halo Security's ethical hackers explore how an attacker could get in, what they could reach, and how to close the gap. Customers work directly with US-based experts at Halo Security. Halo Security includes one round of retesting so customers can verify their remediation work. Halo Security provides reports and attestation letters that give a customer's team, auditor, and prospects evidence of its security. Halo Security reports support SOC 2, HIPAA, PCI, and other compliance needs.

Attack surface management helps organizations discover and monitor the assets they expose to the internet, including websites, APIs, servers, and cloud services. Halo Security continuously checks those internet-exposed assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications. Halo Security identifies open ports and internet-facing services so customers can monitor changes. Halo Security tracks certificates, security headers, third-party scripts, and other security controls across websites. Halo Security detects known vulnerabilities, missing security patches, and outdated software across external servers. Halo Security scans web applications for vulnerabilities such as SQL injection and cross-site scripting. Halo Security monitors for leaked employee credentials, exposed data, and mentions of an organization on the dark web. Halo Security can identify issues like subdomain takeovers, domains for sale, forgotten projects, and misconfigured cloud services. Halo Security risk scores show the external security posture of different teams and business units.

Halo Security is a PCI Security Standards Council Approved Scanning Vendor, and its certificate number is 5078-01-11. Halo Security customers can set scans to run daily, weekly, monthly, quarterly, or on-demand. Customers with multiple business units can generate separate reports in the Halo Security portal. Halo Security scans look at an organization from the outside, with nothing to install and nothing to configure.

Halo Security connects to AWS to import assets from Route53, ElasticIP, and Elastic Load Balancer. Halo Security creates and tracks security issues in Jira, and it streams security events and findings into Splunk. Halo Security syncs security findings with Vanta for compliance monitoring and reporting, and it sends real-time security alerts to a Slack workspace. Brinqa ingests external attack surface findings directly from the Halo Security platform. Halo Security also runs a Security Review, offered quarterly or semi-annually, in which its team works with customers to identify gaps in their coverage.

The Halo Security platform helps organizations of all sizes achieve PCI compliance. In 2013, the operation was spun out to form PathDefender, which was shortly thereafter rebranded as TrustedSite. In 2022, the TrustedSite Security services were rebranded as Halo Security, and the TrustedSite brand remains for certification and marketing solutions. Halo Security has a team of over 30 people. Halo Security was originally based in San Francisco and now offers fully remote working opportunities.^{[1][2][3][4][5][6][7][8][9][10][11]}

Categories

• Penetration testing and red team services (primary category)
• External attack surface management
• Vulnerability management
• Digital risk protection
• Compare Halo Security with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

Not established from our sources

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

halosecurity.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Penetration Testing^{[1][2][3][11]}

  Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments.

  Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. An included round of retesting lets customers verify their remediation work.

• Attack Surface Management^[1][2]

  Helps organizations discover and monitor the assets they expose to the internet.

  Attack surface management covers internet-exposed assets, including websites, APIs, servers, and cloud services. Halo Security continuously checks those assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications.

• Application Scanning^[5]

  Scans web applications for vulnerabilities such as SQL injection and cross-site scripting.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Halo Security's categories, then alphabetical. A list from the record, never a ranking.

• On penetration testing and red team services, Halo Security competes with Astra Security, Bishop Fox, BreachLock, NCC Group, NetSPI, Red Sentry, ABIR Networks, Cobalt, Millennium Corporation, REDLattice and 36 more.

• On external attack surface management, Halo Security competes with Attaxion, Censys, CyCognito, Hadrian, IONIX, Flashpoint, Intruder, Bishop Fox, Bitsight, BreachLock and 25 more.

• On vulnerability management, Halo Security competes with Intruder, ConnectSecure, Qualys, Rapid7, Tenable, Cognition, Dynatrace, Nucleus Security, Flashpoint, Astra Security and 43 more.

• On digital risk protection, Halo Security competes with ZeroFox, BlackCloak, Doppel, Flare, Flashpoint, Cyble, CYPFER, Group-IB, Hold Security, LLC, Outpost24 and 13 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]halosecurity.comHalo Security · halosecurity.com · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
2. [2]Trusted, US-Based Penetration Testing | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
3. [3]12 Questions to Ask a Pentesting Company | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
4. [4]Attack Surface Management Features | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
5. [5]Assess security program effectiveness | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
6. [6]Achieve PCI Compliance | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
7. [7]PCI Compliance Scanning from an ASV | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
8. [8]Integrations | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
9. [9]Halo Security + Brinqa: EASM Meets CTEMHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
10. [10]Security Review | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
11. [11]Customers | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing
12. [12]About Us | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A: the company, a regulator or a filing

Last verified November 12, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded November 12, 2026, expanded November 12, 2026 from the references above.

Work for Halo Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.