What do HackenProof and Vonahi Security sell?

HackenProof sells Bug Bounty, Penetration Testing, Crowdsourced Audit and CTF Platform. Vonahi Security sells vPenTest.

Are HackenProof and Vonahi Security in the same category?

They share Penetration testing and red team services. HackenProof's primary category is Bug bounty and crowdsourced testing and Vonahi Security's is Penetration testing and red team services.

Where are HackenProof and Vonahi Security headquartered?

Vonahi Security is headquartered in Atlanta, GA, USA.

Who owns HackenProof and Vonahi Security?

Vonahi Security is owned by Kaseya.

Vendor comparison · 2 companies

HackenProof vs Vonahi Security

HackenProof is a security company that connects projects with verified security researchers who hunt for vulnerabilities across Web3 and Web2, and provides penetration testing services for web and mobile apps, APIs, and cloud infrastructure. Vonahi Security sells vPenTest, an automated network penetration testing SaaS platform. vPenTest is a scripted network penetration testing platform that runs the exact same steps and processes performed by a security consultant doing a live pentest. vPenTest is a full-scale penetration testing platform that incorporates the knowledge, methodologies, techniques and commonly used tools of multiple consultants into a single platform. vPenTest covers host discovery, service enumeration, vulnerability analysis, exploitation, post-exploitation, privilege escalation and lateral movement, as well as documentation and reporting. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

HackenProof
Vonahi Security

Add a company

HackenProof vs Vonahi Security: Products, Customers and Funding Compared
What it sells
	HackenProofHackenProof is a security company that connects projects with verified security researchers who hunt for vulnerabilities across Web3 and Web2, and provides penetration testing services for web and mobile apps, APIs, and cloud infrastructure.hackenproof.com	Vonahi SecurityVonahi Security sells vPenTest, an automated network penetration testing SaaS platform. vPenTest is a scripted network penetration testing platform that runs the exact same steps and processes performed by a security consultant doing a live pentest. vPenTest is a full-scale penetration testing platform that incorporates the knowledge, methodologies, techniques and commonly used tools of multiple consultants into a single platform. vPenTest covers host discovery, service enumeration, vulnerability analysis, exploitation, post-exploitation, privilege escalation and lateral movement, as well as documentation and reporting.vonahi.io
What it sells	Bug Bounty^[1][2][7]A public or private bug bounty program where the customer sets scope and rewards and HackenProof handles triage, validation, and payouts. Penetration Testing^[1][3]Penetration testing for web and mobile apps, APIs, and cloud infrastructure. Crowdsourced Audit^[1][5]An open audit contest where verified security researchers look for vulnerabilities in the customer's code. CTF Platform^[6]Capture the Flag events designed and run for enterprises and government agencies.	vPenTest^{[1][2][3][4][5][7][10][11][12]}A SaaS platform for automated network penetration testing. vPenTest covers internal and external network environments.
Categories
Categories	Bug bounty and crowdsourced testing (primary category) Penetration testing and red team services Vulnerability management	Penetration testing and red team services (primary category) Breach simulation and automated pen-testing
Headquarters
Headquarters	Not stated on its pages	Atlanta, GA, USA^[1][11]
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Owned by Kaseya^[5]
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	Not written yet
Last verified
Last verified	November 13, 2026	November 12, 2026

Where they overlap

HackenProof and Vonahi Security are both filed under Penetration testing and red team services.

Where they differ, field by field

HackenProof's primary category is Bug bounty and crowdsourced testing; Vonahi Security's is Penetration testing and red team services.
HackenProof is also filed under Vulnerability management. Vonahi Security is also filed under Breach simulation and automated pen-testing.
HackenProof lists Bug Bounty, Penetration Testing, Crowdsourced Audit and CTF Platform. Vonahi Security lists vPenTest.
Vonahi Security is headquartered in Atlanta, GA, USA.
Vonahi Security is owned by Kaseya.

What it sells: HackenProof

What Bug Bounty does^[1][2][7]: Customers can launch a public or private bug bounty program on HackenProof. Built-in KYC workflows verify researcher identities for regulated industries. Rewards can be paid in stablecoins, fiat, or native tokens through HackenProof's payout management services.
What Penetration Testing does^[1][3]: HackenProof offers white-box, grey-box, and black-box penetration testing. A HackenProof pentest starts within 24 hours of the customer's request.
What Crowdsourced Audit does^[1][5]: A HackenProof crowdsourced audit is an open contest where thousands of verified security researchers compete to find vulnerabilities in the customer's code. HackenProof audits support languages including Solidity, Rust, Move, Go, C#, C++, Java, Python, and Cairo.
What CTF Platform does^[6]: HackenProof's CTF platform designs and runs Capture the Flag (CTF) events for enterprises and government agencies. HackenProof adapts every CTF to the experience level of its participants, from beginners to experienced security professionals.

Questions about HackenProof and Vonahi Security

What do HackenProof and Vonahi Security sell?: HackenProof sells Bug Bounty, Penetration Testing, Crowdsourced Audit and CTF Platform. Vonahi Security sells vPenTest.
Are HackenProof and Vonahi Security in the same category?: They share Penetration testing and red team services. HackenProof's primary category is Bug bounty and crowdsourced testing and Vonahi Security's is Penetration testing and red team services.
Where are HackenProof and Vonahi Security headquartered?: Vonahi Security is headquartered in Atlanta, GA, USA.
Who owns HackenProof and Vonahi Security?: Vonahi Security is owned by Kaseya.

About HackenProof

HackenProof is a security company that connects projects with verified security researchers who hunt for vulnerabilities across Web3 and Web2, and provides penetration testing services for web and mobile apps, APIs, and cloud infrastructure. On the HackenProof platform, the customer sets the scope and rewards, and HackenProof handles triage, validation, and payouts. HackenProof researchers test targets that range from DeFi protocols to fintech, healthcare, and e-commerce.^[1][3]

HackenProof customers can launch a public or private bug bounty program. HackenProof includes built-in KYC workflows that verify researcher identities and meet compliance requirements in regulated industries. HackenProof validates vulnerability reports before they reach the customer team, filtering out duplicates and low-quality submissions. HackenProof report encryption uses end-to-end encryption with the customer's own PGP keys. HackenProof uses an AI-powered triage assistant built on the Model Context Protocol (MCP) to help process vulnerability reports. Customers can reward hackers in stablecoins, fiat, or native tokens through HackenProof's payout management services. HackenProof connects to existing workflows through webhooks, API, MCP, and 100+ supported communication, development, cloud, and automation applications. HackenProof can stream validated vulnerability reports straight into an issue tracker, chat, and on-call rotation.^[1][4]

HackenProof offers white-box, grey-box, and black-box penetration testing and delivers a report on real security risks. A HackenProof pentest starts within 24 hours of the customer's request. HackenProof assigns vetted experts with relevant experience in the customer's stack. HackenProof runs the pentest on its Vulnerability Coordination Platform, where customers review validated reports, leave comments, and discuss findings with testers directly. Once fixes are in place, HackenProof verifies them, confirms closure, and delivers a branded final report ranking all findings by severity.^[1][3]

HackenProof penetration testing covers several kinds of systems. HackenProof tests web and mobile applications for authentication and session flaws, business logic abuse, and platform-specific risks on iOS and Android. HackenProof tests REST, GraphQL, and other API architectures for broken authorization, injection points, rate-limiting gaps, and data exposure. HackenProof tests AWS, GCP, Azure, and hybrid environments for misconfigurations, identity and access management weaknesses, exposed storage, and lateral movement paths between services. HackenProof assesses internal and external network infrastructure for exposed services, misconfigurations, and privilege escalation paths. HackenProof tests blockchain applications, dApps, smart contracts, bridges, and decentralized infrastructure for vulnerabilities that could impact funds, protocol functionality, or user assets. HackenProof tests AI-powered systems, from LLM applications to autonomous agents, for prompt injection, data leakage, model abuse, excessive agency, and insecure tool integrations.^[3]

HackenProof describes its private audit as an expert-led security code review for projects that need strict confidentiality before a fundraise, launch, or regulatory review. A HackenProof crowdsourced audit is an open contest where thousands of verified security researchers compete to find vulnerabilities in the customer's code. HackenProof audits support languages including Solidity, Rust, Move, Go, C#, C++, Java, Python, and Cairo.^[1]

HackenProof's CTF platform designs and runs Capture the Flag (CTF) events for enterprises and government agencies. A Capture The Flag event is a cybersecurity competition where participants solve hands-on challenges across web exploitation, cryptography, OSINT, reverse engineering, digital forensics, and smart contract security. HackenProof adapts every CTF to the experience level of its participants, from beginners to experienced security professionals. HackenProof combined its expertise with Hack The Box to create a specialized blockchain security CTF. HackenProof organized the National CTF in partnership with the Defence Intelligence of Ukraine (GUR). For banks and financial institutions, HackenProof runs private, invite-only CTFs.

The Security Expansion Program launched on HackenProof connects Sui ecosystem projects with researchers, bug bounty programs, and audits. HackenProof ran an audit contest for TipRun's peer-to-peer cricket prediction exchange. HackenProof carried out a private audit of WrappedCBDC's cNGN stablecoin on Canton.^[3][7]

HackenProof on the record

About Vonahi Security

Vonahi Security sells vPenTest, an automated network penetration testing SaaS platform. vPenTest is a scripted network penetration testing platform that runs the exact same steps and processes performed by a security consultant doing a live pentest. vPenTest is a full-scale penetration testing platform that incorporates the knowledge, methodologies, techniques and commonly used tools of multiple consultants into a single platform. vPenTest covers host discovery, service enumeration, vulnerability analysis, exploitation, post-exploitation, privilege escalation and lateral movement, as well as documentation and reporting.^[3]

Vonahi Security describes traditional security assessment as outsourced consultants providing manual testing, mostly as a once a year test.^[6]

With vPenTest, a customer deploys an agent, schedules an internal assessment and receives detailed reports within a few days. Customers of vPenTest control the schedule, frequency and scope of every assessment. vPenTest lets a customer schedule an internal or external network penetration test anytime it is needed. vPenTest can perform pre- and post-breach simulations at any time within both the internal and external network environments. vPenTest generates a report for the customer and its team to review within 48 hours after the penetration test is complete. vPenTest reports show trending data, which lets a team see improvements from one month to another.^[7][9]

Host discovery in vPenTest covers systems and services within the targeted environment, including active systems and port scanning. vPenTest enumerates services and systems to identify potentially valuable information, including vulnerability analysis. vPenTest launches attacks against vulnerable services, including password-based attacks, man-in-the-middle attacks, relay attacks and more. After gaining an initial foothold on a system, vPenTest automatically attempts to launch privilege escalation attacks.

Network teams can correlate vPenTest activities with their SIEM and incident response procedures. vPenTest has a progress tracker that shows the IT team the progress of the engagement, when it is expected to be completed and any preliminary findings. Vonahi Security provides flexibility in schedule, alerting and real-time activity tracking, and segmentation testing to confirm isolation of sensitive networks. Vonahi Security performs penetration testing against a network environment and compares its activities with the customer's monitoring and alerting controls, so the organization can assess its technical security controls against malicious attackers from multiple perspectives.^[3][4]

Vonahi Security positions vPenTest for MSPs that offer network penetration testing to SMB clients. Vonahi Security also positions vPenTest for internal IT teams that evaluate cybersecurity risks in real-time.^[3][8]

Stratus ip is a provider of telecommunications and managed services for businesses of all sizes, and Stratus ip switched to vPenTest's automated network pentesting solution. Clients of Stratus ip now conduct tests quarterly rather than just once a year. Netcotech is based in Edmonton, Alberta and offers managed and professional IT services, and Netcotech uses vPenTest for internal and external network pentesting. Insurwave, an insurance e-trading platform, shifted to a monthly network penetration testing model with vPenTest. Greene County General Hospital adopted vPenTest. W-Industries used vPenTest to meet the penetration testing requirements of its cyber insurance. Port53 uses vPenTest in its penetration testing services, and AvTek Solutions uses vPenTest in its security services.^[7][10][12]

Vonahi Security is CREST accredited in both EMEA and Australasia. MSP partners and customers can receive a CREST-certified network penetration test report from vPenTest across Europe, the Middle East, Africa and Australasia. CREST is an international non-profit organization that certifies and accredits cybersecurity companies.^[2][4][7][9]

Vonahi Security on the record

Sources

HackenProof full record

[1]hackenproof.comHackenProof · hackenproof.com · undated page, accessed November 13, 2026 · Tier A
[2]Bug Bounty Platform Trusted by 400+ Projects | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A
[3]Penetration Testing Services | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A
[4]Integrations | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A
[5]Cybersecurity Audit Services for Web2 & Web3 Projects | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A
[6]CTF Platform for Enterprises & Government | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A
[7]Sui Security Expansion Program – HackenProof & Sui FoundationHackenProof · undated page, accessed November 13, 2026 · Tier A
[8]Customer Proof — Case Studies | HackenProofHackenProof · undated page, accessed November 13, 2026 · Tier A

Vonahi Security full record

[1]Crest press releaseVonahi Security · vonahi.io · published June 12, 2024 · Tier A
[2]vonahi.iovonahi.io · undated page, accessed November 12, 2026 · Tier A
[3]ServicesVonahi Security · undated page, accessed November 12, 2026 · Tier A
[4]CREST Penetration Testing 2025 | Vonahi SecurityVonahi Security · undated page, accessed November 12, 2026 · Tier A
[5]Network Penetration Testing Platform | vPenTestVonahi Security · undated page, accessed November 12, 2026 · Tier A
[6]Meet Our Team | Vonahi SecurityVonahi Security · undated page, accessed November 12, 2026 · Tier A
[7]Automated Network Penetration Testing | Vonahi SecurityVonahi Security · undated page, accessed November 12, 2026 · Tier A
[8]Get a vPenTest Pricing Quote | Vonahi SecurityVonahi Security · undated page, accessed November 12, 2026 · Tier A
[9]InsurwaveVonahi Security · undated page, accessed November 12, 2026 · Tier A
[10]Stratus ip Case Study | vPenTestVonahi Security · undated page, accessed November 12, 2026 · Tier A
[11]NetcotechVonahi Security · undated page, accessed November 12, 2026 · Tier A
[12]Case StudiesVonahi Security · undated page, accessed November 12, 2026 · Tier A

Spot a factual error? Request a correction.