What do Cobalt and Hold Security, LLC sell?

Cobalt sells Autonomous Pentest, Cobalt Sage AI, Secure Code Review and Internal Network Pentest. Hold Security, LLC sells Threat Intelligence Services and Domain Integrity Service.

Are Cobalt and Hold Security, LLC in the same category?

They share Penetration testing and red team services. Cobalt's primary category is Penetration testing and red team services and Hold Security, LLC's is Threat intelligence.

Who are Cobalt and Hold Security, LLC sold to?

From its own pages, Cobalt sells mainly to security and development teams. From its own pages, Hold Security sells mainly to companies of all sizes.

Vendor comparison · 2 companies

Cobalt vs Hold Security, LLC

Cobalt offers a full suite of offensive security services, from autonomous pentesting to human-led pentesting. Hold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Cobalt
Hold Security, LLC

Add a company

Cobalt vs Hold Security, LLC: Products, Customers and Funding Compared
What it sells
	CobaltCobalt offers a full suite of offensive security services, from autonomous pentesting to human-led pentesting.cobalt.io	Hold Security, LLCHold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure.holdsecurity.com
What it sells	Autonomous Pentest^[3][7]Complete pentests in 24 hours with proof of exploit on every finding. Cobalt Sage AI^[3][6][7]The intelligence Cobalt says powers every Cobalt pentest. Secure Code Review^[8]Human-led analysis of source code to find security vulnerabilities. Internal Network Pentest^[10]Testing of internal systems by Cobalt experts.	Threat Intelligence Services^[1][4][6]Indexes and correlates public and private resources on the Dark Web and Internet to identify malicious and threatening events. Domain Integrity Service^[2][4]Provides monitoring and alerting of domain names.
Categories
Categories	Penetration testing and red team services (primary category)	Threat intelligence (primary category) Digital risk protection Penetration testing and red team services Incident response and forensics
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: listed, seen November 5, 2026^[5] Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	From its own pages, Cobalt sells mainly to security and development teams. Cobalt says customers use it to test critical web applications and APIs in production, AI and LLM-based applications still in development, and globally distributed networks segmented by location and business unit. Cobalt offers centralized management of parent and child organizations. Cobalt says its pentesting helps customers meet audit, regulatory and customer requirements.	From its own pages, Hold Security sells mainly to companies of all sizes. Hold Security designs its Threat Intelligence Services to assist organizations in monitoring the Dark Web. Companies that develop their own software, or want to verify that vendor software contains no undiscovered vulnerabilities, are among those Hold Security says it can help. Hold Security also directs its incident response work at companies that encounter ransomware, APTs, Nation State targeting or suspected cyber fraud or theft. Organizations that want to verify organizational controls around regulatory levels, human resources and data classification are another group Hold Security addresses.
Last verified
Last verified	September 27, 2026	October 30, 2026

Where they overlap

Cobalt and Hold Security, LLC are both filed under Penetration testing and red team services.

Where they differ, field by field

Cobalt's primary category is Penetration testing and red team services; Hold Security, LLC's is Threat intelligence.
Hold Security, LLC is also filed under Digital risk protection and Incident response and forensics.
Cobalt lists Autonomous Pentest, Cobalt Sage AI, Secure Code Review and Internal Network Pentest. Hold Security, LLC lists Threat Intelligence Services and Domain Integrity Service.

What it sells: Cobalt

What Autonomous Pentest does^[3][7]: Cobalt Autonomous Pentest is overseen by Cobalt Core pentesters. Cobalt says it delivers complete pentests in 24 hours with proof of exploit on every finding.
What Cobalt Sage AI does^[3][6][7]: Cobalt says Cobalt Sage AI is built on 13 years of expertise and informed by thousands of security engagements. Cobalt says it removes reconnaissance, scanning, triage and reporting work so human experts can focus on complex attack paths.
What Secure Code Review does^[8]: Secure code review is described as human-led analysis of source code. Cobalt uses SAST and SCA for automated scanning and then manually reviews the output to validate findings.
What Internal Network Pentest does^[10]: Cobalt says its experts use network scanning tools, exploit frameworks and manual techniques to find and exploit vulnerabilities in internal systems. Findings appear in real time on the Cobalt platform with remediation guidance.

What it sells: Hold Security, LLC

What Domain Integrity Service does^[2][4]: Hold Security's Domain Integrity Service provides monitoring and alerting of domain names. Domain Integrity Service offers portal access or customized reports created by Hold Security analysts.

Questions about Cobalt and Hold Security, LLC

What do Cobalt and Hold Security, LLC sell?: Cobalt sells Autonomous Pentest, Cobalt Sage AI, Secure Code Review and Internal Network Pentest. Hold Security, LLC sells Threat Intelligence Services and Domain Integrity Service.
Are Cobalt and Hold Security, LLC in the same category?: They share Penetration testing and red team services. Cobalt's primary category is Penetration testing and red team services and Hold Security, LLC's is Threat intelligence.
Who are Cobalt and Hold Security, LLC sold to?: From its own pages, Cobalt sells mainly to security and development teams. From its own pages, Hold Security sells mainly to companies of all sizes.

About Cobalt

Cobalt offers a full suite of offensive security services, from autonomous pentesting to human-led pentesting. The Cobalt Offensive Security Platform helps customers move beyond point in time pentesting to a continuous offensive security program.^[1][3]

Cobalt says most pentesting programs still operate on an annual cycle. Cobalt describes the gap between how fast risk changes and how often organizations test for it as the exposure adversaries count on.^[7]

The Cobalt Platform centralizes access to the full range of security testing services: web app, API, cloud, network, red teaming, AI and LLM, and more. Customers can launch a pentest in hours and get real-time findings. Customers can collaborate directly with testers via the platform, Microsoft Teams or Slack. Cobalt says Cobalt Sage AI powers every Cobalt pentest and is built on 13 years of expertise, informed by thousands of security engagements. Cobalt says Cobalt Sage AI removes the reconnaissance, scanning, triage and reporting work so human experts can focus on complex attack paths and creative scenarios.^{[1][3][4][7][10]}

Cobalt delivers penetration testing across the entire application portfolio to find and fix vulnerabilities before they are exploited. Cobalt says network and cloud infrastructure are high-value targets in a constant state of change, and that Cobalt identifies and validates real exposures across the attack surface. Network and cloud testing covers Internal Network Pentest, External Network Pentest, Cloud Pentest and Cloud Configuration Review. Advanced offensive security services from Cobalt test systems against the tactics and techniques of a sophisticated adversary. Cobalt's advanced services include Red Teaming, Digital Risk Assessment and Secure Code Review. Customers use Cobalt to test critical web applications and APIs in production, AI and LLM-based applications still in development, and globally distributed networks segmented by location and business unit. For code review, Cobalt uses SAST and SCA for automated scanning and then reviews the scanner output manually to validate the findings.^{[3][4][8][10]}

Cobalt offers two testing delivery models. Customers can choose one or mix and match depending on assets, environment, release cycles and goals. Human-led testing draws on purpose-built methodologies and 500+ vetted security experts in the Cobalt Core. Cobalt Autonomous Pentest delivers complete pentests in 24 hours with proof of exploit on every finding, overseen by Cobalt Core pentesters. Agentic Penetration Testing as a Service pairs AI-driven automation with human pentesters to deliver continuous offensive security. Cobalt says periodic penetration testing meets compliance deadlines and continuous testing gives coverage in between.^[3][4][7]

Cobalt pushes vulnerability data into Jira, GitHub, ServiceNow and more through 50+ integrations. Cobalt offers unlimited retesting with a seven-day SLA. Cobalt offers centralized management of parent and child organizations. Cobalt says its customizable reports are mapped to SOC 2, ISO 27001, HIPAA and PCI-DSS. A Cobalt Credit represents the equivalent of 8 hours of offensive security testing. Cobalt sells credits in annual packages that include asset scoping, testing, retesting and platform access. Credits do not roll over into the next contract.^{[2][3][4][7][9]}

Cobalt on the record

About Hold Security, LLC

Hold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure. Hold Security works with companies around the world to enhance their security posture. Alex Holden worked for over 10 years as the Chief Information Security Officer for a large brokerage firm in the United States before joining the consulting world. Hold Security engineers play lead roles in investigations of major security breaches.^[3]

Hold Security indexes and correlates public and private/confidential resources on the Dark Web and Internet to identify malicious and threatening events. Hold Security Threat Intelligence Analysts examine threat data and interpret it to eliminate false positives. Hold Security designs its Threat Intelligence Services to assist organizations in monitoring the Dark Web. Hold Security has profiled thousands of actors. Most data gathering and processing at Hold Security is conducted by native speakers of English, Russian, Ukrainian, Spanish, Portuguese, and Mandarin.^[1][3]

Hold Security's Domain Integrity Service provides monitoring and alerting of domain names. Domain Integrity Service offers portal access or customized reports created by Hold Security analysts.^[2]

Hold Security conducts assessments of infrastructure and software through its Information Security Assessment Services to identify critical vulnerabilities. Hold Security offers services that include Penetration Testing, Red Team, and Vulnerability Assessment. Hold Security conducts all of its assessments in accordance with industry regulations and customer requirements. Hold Security compares test results to industry security standards and continuously measures improvements over time.^[2][5][6]

Hold Security testing methodologies require engineers to conduct in-depth manual reviews of test results and their own battery of tests. Hold Security never relies on automated scanning tools as a sole way for assessments. Hold Security uses its Threat Intelligence Services to obtain the latest tools and techniques employed by cyber criminals. Hold Security's Black Box assessment technique simulates real-life situations where electronic assets are tested for vulnerabilities and subversions using the most basic sets of information available. Hold Security's Grey Box assessment technique scans with as much knowledge about the systems as the customer is willing to share. Hold Security offers a White Box assessment to audit or test systems, performed from the system administrator level with access to all necessary resources.^[6]

Hold Security conducts tests including regression testing, debug analysis and code review to test all inputs and outputs of software for vulnerabilities. Hold Security's services include examinations of patch levels across customer software and libraries. Hold Security provides specialized Red Teams focused on offense and Purple Teams that unite offense and defense. Hold Security can help customers verify that organizational controls around security are effective on regulatory levels, human resources, and data classification. Hold Security engineers help customers identify data types and how data moves inside the enterprise within its partners and for its customers.^[6]

Hold Security offers Incident Response Services to provide support and expertise in the event of cyber incidents. Hold Security helps companies that suspect cyber fraud or theft, face APTs or Nation State targeting, or encounter issues with ransomware. Hold Security works with companies of all sizes, including Fortune Global 500 organizations.^[2][3][5][6]

Hold Security, LLC on the record

Sources

Cobalt full record

[1]cobalt.ioCobalt · cobalt.io · undated page, accessed September 27, 2026 · Tier A
[2]Cobalt Introduces New AI Capabilities for Continuous PentestingCobalt via Business Wire · businesswire.com · published March 19, 2026 · Tier A
[3]Cobalt: Continuous Offensive Security TestingCobalt · undated page, accessed October 23, 2026 · Tier A
[4]Cybersecurity Services | CobaltCobalt · undated page, accessed October 23, 2026 · Tier A
[5]Cobalt Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed October 23, 2026 · Tier C
[6]Modern Offensive Security Platform | CobaltCobalt · undated page, accessed November 5, 2026 · Tier A
[7]Agentic PTaaS: Pentest as a Service | CobaltCobalt · undated page, accessed November 5, 2026 · Tier A
[8]Secure Code Review Services | CobaltCobalt · undated page, accessed November 5, 2026 · Tier A
[9]Pentest Pricing & Penetration Testing Costs | CobaltCobalt · undated page, accessed November 5, 2026 · Tier A
[10]Internal Network Penetration Testing Services | CobaltCobalt · undated page, accessed November 5, 2026 · Tier A

Hold Security, LLC full record

[1]holdsecurity.comHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
[2]SolutionsHold Security · holdsecurity.com · undated page, accessed October 30, 2026 · Tier A
[3]About Us | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
[4]Hold Security - Information Security & Threat IntelligenceHold Security · undated page, accessed November 10, 2026 · Tier A
[5]Solutions | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A
[6]Information Security Assessment Services | Hold SecurityHold Security · undated page, accessed November 10, 2026 · Tier A

Spot a factual error? Request a correction.