CISO Tribune

Vendor comparison · 2 companies

Halo Security vs Leidos

Halo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together. Leidos is a technology company that serves government and commercial customers with digital and mission innovations, with AI, cyber and mission software at its core. CISO Tribune files both under Vulnerability management. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Halo Security
  • Leidos
Halo Security vs Leidos: Products, Customers and Funding Compared
Halo SecurityHalo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together.halosecurity.comLeidosLeidos is a technology company that serves government and commercial customers with digital and mission innovations, with AI, cyber and mission software at its core.leidos.com
What it sells
  • Penetration Testing[1][2][3][11]Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments.
  • Attack Surface Management[1][2]Helps organizations discover and monitor the assets they expose to the internet.
  • Application Scanning[5]Scans web applications for vulnerabilities such as SQL injection and cross-site scripting.
  • Parcata[1]A tool that discovers, validates and prioritizes software vulnerabilities across mission-critical systems to focus remediation efforts.
  • UpHold[1]A platform that combines proactive defense and AI-driven analytics to reduce cyber risk and help security teams prioritize and respond to alerts.
  • Cyber and Electromagnetic Activities Resiliency System (CRS)[1]A system that provides real-time detection and AI-enabled analytics to give earlier warning of threats to tactical systems.
Categories
Headquarters
Not stated on its pagesReston, Virginia, United States[2][12]
Founded
Not stated on its pagesNot stated on its pages
Ownership and funding
Not stated on its pagesPublic (NYSE: LDOS)[2][8][11][13][17][20]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • October 2, 2026Leidos has a new joint venture, operating under the Analogic brand, that combines security screening technologies, engineering expertise and advanced manufacturing capabilities.[10]
  • September 29, 2026Leidos introduced a capability that uses AI agents to help security operations center teams identify threats needing immediate action.[9]
  • March 30, 2026Leidos completed its acquisition of ENTRUST Solutions Group from Kohlberg for approximately $2.4 billion.[20]
  • March 30, 2026Leidos added ENTRUST through an acquisition, gaining more than 3,100 professionals in electric grid engineering and natural gas infrastructure.[8]
  • March 10, 2026Leidos announced a partnership with Dropzone AI to help U.S. federal agencies respond to cyber threats, and made a strategic investment in Dropzone AI.[21]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 5, 2026[11]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Leidos sells mainly to government and commercial customers. Leidos names the defense, intelligence, civil and health markets. Leidos Australia has partnered with government, defence and national security customers. Leidos provides engineering services for commercial electric utilities. Leidos describes DISN services delivered to the Department of War (DoW) and national security organizations worldwide.
Last verified
November 12, 2026October 12, 2026

Where they overlap

  • Halo Security and Leidos are both filed under Vulnerability management.

Where they differ, field by field

  • Halo Security's primary category is Penetration testing and red team services; Leidos's is Security consulting and advisory.
  • Halo Security is also filed under External attack surface management and Digital risk protection. Leidos is also filed under AI SOC analysts and Managed security service providers.
  • Halo Security lists Penetration Testing, Attack Surface Management and Application Scanning. Leidos lists Parcata, UpHold and Cyber and Electromagnetic Activities Resiliency System (CRS).
  • Leidos is headquartered in Reston, Virginia, United States.
  • Leidos is a public company listed on NYSE as LDOS.

What it sells: Halo Security

What Penetration Testing does[1][2][3][11]
Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. An included round of retesting lets customers verify their remediation work.
What Attack Surface Management does[1][2]
Attack surface management covers internet-exposed assets, including websites, APIs, servers, and cloud services. Halo Security continuously checks those assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications.

Questions about Halo Security and Leidos

What do Halo Security and Leidos sell?
Halo Security sells Penetration Testing, Attack Surface Management and Application Scanning. Leidos sells Parcata, UpHold and Cyber and Electromagnetic Activities Resiliency System (CRS).
Are Halo Security and Leidos in the same category?
They share Vulnerability management. Halo Security's primary category is Penetration testing and red team services and Leidos's is Security consulting and advisory.
Where are Halo Security and Leidos headquartered?
Leidos is headquartered in Reston, Virginia, United States.
Who owns Halo Security and Leidos?
Leidos is a public company listed on NYSE as LDOS.
Who are Halo Security and Leidos sold to?
From its own pages, Leidos sells mainly to government and commercial customers.
What have Halo Security and Leidos announced recently?
October 2, 2026: Leidos has a new joint venture, operating under the Analogic brand, that combines security screening technologies, engineering expertise and advanced manufacturing capabilities.

About Halo Security

Halo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers.[1][2][3]

Halo Security's ethical hackers explore how an attacker could get in, what they could reach, and how to close the gap. Customers work directly with US-based experts at Halo Security. Halo Security includes one round of retesting so customers can verify their remediation work. Halo Security provides reports and attestation letters that give a customer's team, auditor, and prospects evidence of its security. Halo Security reports support SOC 2, HIPAA, PCI, and other compliance needs.[1][2]

Attack surface management helps organizations discover and monitor the assets they expose to the internet, including websites, APIs, servers, and cloud services. Halo Security continuously checks those internet-exposed assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications. Halo Security identifies open ports and internet-facing services so customers can monitor changes. Halo Security tracks certificates, security headers, third-party scripts, and other security controls across websites. Halo Security detects known vulnerabilities, missing security patches, and outdated software across external servers. Halo Security scans web applications for vulnerabilities such as SQL injection and cross-site scripting. Halo Security monitors for leaked employee credentials, exposed data, and mentions of an organization on the dark web. Halo Security can identify issues like subdomain takeovers, domains for sale, forgotten projects, and misconfigured cloud services. Halo Security risk scores show the external security posture of different teams and business units.[1][2][4][5][11]

Halo Security is a PCI Security Standards Council Approved Scanning Vendor, and its certificate number is 5078-01-11. Halo Security customers can set scans to run daily, weekly, monthly, quarterly, or on-demand. Customers with multiple business units can generate separate reports in the Halo Security portal. Halo Security scans look at an organization from the outside, with nothing to install and nothing to configure.[6][7]

Halo Security connects to AWS to import assets from Route53, ElasticIP, and Elastic Load Balancer. Halo Security creates and tracks security issues in Jira, and it streams security events and findings into Splunk. Halo Security syncs security findings with Vanta for compliance monitoring and reporting, and it sends real-time security alerts to a Slack workspace. Brinqa ingests external attack surface findings directly from the Halo Security platform. Halo Security also runs a Security Review, offered quarterly or semi-annually, in which its team works with customers to identify gaps in their coverage.[8][9][10]

The Halo Security platform helps organizations of all sizes achieve PCI compliance. In 2013, the operation was spun out to form PathDefender, which was shortly thereafter rebranded as TrustedSite. In 2022, the TrustedSite Security services were rebranded as Halo Security, and the TrustedSite brand remains for certification and marketing solutions. Halo Security has a team of over 30 people. Halo Security was originally based in San Francisco and now offers fully remote working opportunities.[1][5][6][7][10][11]

Halo Security on the record

Sources

Halo Security full record

  1. [1]halosecurity.comHalo Security · halosecurity.com · undated page, accessed November 12, 2026 · Tier A
  2. [2]Trusted, US-Based Penetration Testing | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  3. [3]12 Questions to Ask a Pentesting Company | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  4. [4]Attack Surface Management Features | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  5. [5]Assess security program effectiveness | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  6. [6]Achieve PCI Compliance | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  7. [7]PCI Compliance Scanning from an ASV | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  8. [8]Integrations | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  9. [9]Halo Security + Brinqa: EASM Meets CTEMHalo Security · undated page, accessed November 12, 2026 · Tier A
  10. [10]Security Review | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  11. [11]Customers | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
  12. [12]About Us | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A

Leidos full record

  1. [1]CyberLeidos · leidos.com · undated page, accessed October 12, 2026 · Tier A
  2. [2]Leidos delivers strong second quarter and enhances full yearPRNewswire · investors.leidos.com · published August 4, 2026 · Tier A
  3. [3]Platform Engineer in Australia (No Remote)Leidos · undated page, accessed November 1, 2026 · Tier A
  4. [4]Azure Cloud Security Engineeer in Adelphi, Maryland (Hybrid Remote)Leidos · undated page, accessed November 1, 2026 · Tier A
  5. [5]Senior AI Platform Engineer in Adelphi, Maryland (Remote)Leidos · undated page, accessed November 1, 2026 · Tier A
  6. [6]Production Technician in Australia (No Remote)Leidos · undated page, accessed November 1, 2026 · Tier A
  7. [7]Transportation Data Scientist (AI Solutions) in McLean, Virginia (No Remote)Leidos · undated page, accessed November 1, 2026 · Tier A
  8. [8]Leidos completes $2.4 billion acquisition of ENTRUSTLeidos · published March 30, 2026 · Tier A
  9. [9]Leidos launches agentic AI platform to speed response to cyber threatsLeidos · published September 29, 2026 · Tier A
  10. [10]Leidos Security Enterprise Solutions and Analogic close deal to strengthen global security screening capabilitiesLeidos · published October 2, 2026 · Tier A
  11. [11]Leidos Reviews 2026: Details, Pricing, & Features | G2G2 · undated page, accessed November 1, 2026 · Tier C
  12. [12]Customer Service Representative in Indianapolis, Indiana (No Remote)Leidos · undated page, accessed November 5, 2026 · Tier A
  13. [13]Global | LeidosLeidos · undated page, accessed November 5, 2026 · Tier A
  14. [14]Deputy Operations Service Delivery Manager (SDM) in Scott Air Force Base, Illinois (No Remote)Leidos · undated page, accessed November 5, 2026 · Tier A
  15. [15]Leidos. Outsmart. Outdo.Leidos · undated page, accessed November 5, 2026 · Tier A
  16. [16]Tier 1 Customer Service Representative in Remote, US (Remote)Leidos · undated page, accessed November 5, 2026 · Tier A
  17. [17]Leidos to acquire power design firm ENTRUST, bolstering its energy infrastructure portfolio | LeidosLeidos · published January 26, 2026 · Tier A
  18. [18]Platform Engineer in Australia (Hybrid Remote)Leidos · undated page, accessed November 5, 2026 · Tier A
  19. [19]Cybersecurity Project Manager in Adelphi, Maryland (Hybrid Remote)Leidos · undated page, accessed November 5, 2026 · Tier A
  20. [20]Leidos completes $2.4 billion acquisition of ENTRUSTPR Newswire · published March 30, 2026 · Tier A
  21. [21]Leidos, Dropzone AI to accelerate federal agencies' cyber responsesLeidos · published March 10, 2026 · Tier A

Spot a factual error? Request a correction.