What do Halo Security and Tenfold Security sell?

Halo Security sells Penetration Testing, Attack Surface Management and Application Scanning. Tenfold Security sells Real-Time Risk Assessment.

Are Halo Security and Tenfold Security in the same category?

They share Penetration testing and red team services. Halo Security's primary category is Penetration testing and red team services and Tenfold Security's is MDR and managed SOC.

Vendor comparison · 2 companies

Halo Security vs Tenfold Security

Halo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together. Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. CISO Tribune files both under Penetration testing and red team services. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

Halo Security
Tenfold Security

Add a company

Halo Security vs Tenfold Security: Products, Customers and Funding Compared
What it sells
	Halo SecurityHalo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together.halosecurity.com	Tenfold SecurityTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services.tenfoldsecurity.com
What it sells	Penetration Testing^{[1][2][3][11]}Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Attack Surface Management^[1][2]Helps organizations discover and monitor the assets they expose to the internet. Application Scanning^[5]Scans web applications for vulnerabilities such as SQL injection and cross-site scripting.	Real-Time Risk Assessment^[3]Automates compliance with standards such as HIPAA, PCI and SOX.
Categories
Categories	Penetration testing and red team services (primary category) External attack surface management Vulnerability management Digital risk protection	MDR and managed SOC (primary category) Penetration testing and red team services SIEM Security consulting and advisory
Headquarters
Headquarters	Not stated on its pages	Not stated on its pages
Founded
Founded	Not stated on its pages	Not stated on its pages
Ownership and funding
Ownership and funding	Not stated on its pages	Not stated on its pages
Named customers
Named customers	Not stated on its pages	Not stated on its pages
Recent news
Recent news	Not stated on its pages	Not stated on its pages
G2 and Gartner Peer Insights
G2 and Gartner Peer Insights	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages	G2: Not stated on its pages Gartner Peer Insights: Not stated on its pages
Who it fits
Who it fits	Not written yet	Not written yet
Last verified
Last verified	November 12, 2026	October 21, 2026

Where they overlap

Halo Security and Tenfold Security are both filed under Penetration testing and red team services.

Where they differ, field by field

Halo Security's primary category is Penetration testing and red team services; Tenfold Security's is MDR and managed SOC.
Halo Security is also filed under External attack surface management, Vulnerability management and Digital risk protection. Tenfold Security is also filed under SIEM and Security consulting and advisory.
Halo Security lists Penetration Testing, Attack Surface Management and Application Scanning. Tenfold Security lists Real-Time Risk Assessment.

What it sells: Halo Security

What Penetration Testing does^{[1][2][3][11]}: Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. An included round of retesting lets customers verify their remediation work.
What Attack Surface Management does^[1][2]: Attack surface management covers internet-exposed assets, including websites, APIs, servers, and cloud services. Halo Security continuously checks those assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications.

What it sells: Tenfold Security

What Real-Time Risk Assessment does^[3]: Tenfold Security's Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX. Continuous monitoring provides instant updates and alerts.

Questions about Halo Security and Tenfold Security

What do Halo Security and Tenfold Security sell?: Halo Security sells Penetration Testing, Attack Surface Management and Application Scanning. Tenfold Security sells Real-Time Risk Assessment.
Are Halo Security and Tenfold Security in the same category?: They share Penetration testing and red team services. Halo Security's primary category is Penetration testing and red team services and Tenfold Security's is MDR and managed SOC.

About Halo Security

Halo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together. Halo Security tests web and mobile applications, APIs, external and internal networks, and wireless environments. Halo Security offers social engineering and red teaming. Halo Security's penetration testing service combines manual investigation with tools whose results are validated by testers.^[1][2][3]

Halo Security's ethical hackers explore how an attacker could get in, what they could reach, and how to close the gap. Customers work directly with US-based experts at Halo Security. Halo Security includes one round of retesting so customers can verify their remediation work. Halo Security provides reports and attestation letters that give a customer's team, auditor, and prospects evidence of its security. Halo Security reports support SOC 2, HIPAA, PCI, and other compliance needs.^[1][2]

Attack surface management helps organizations discover and monitor the assets they expose to the internet, including websites, APIs, servers, and cloud services. Halo Security continuously checks those internet-exposed assets for vulnerabilities and changes. Halo Security finds and inventories internet-facing assets, including unknown and forgotten websites, IPs, services, and applications. Halo Security identifies open ports and internet-facing services so customers can monitor changes. Halo Security tracks certificates, security headers, third-party scripts, and other security controls across websites. Halo Security detects known vulnerabilities, missing security patches, and outdated software across external servers. Halo Security scans web applications for vulnerabilities such as SQL injection and cross-site scripting. Halo Security monitors for leaked employee credentials, exposed data, and mentions of an organization on the dark web. Halo Security can identify issues like subdomain takeovers, domains for sale, forgotten projects, and misconfigured cloud services. Halo Security risk scores show the external security posture of different teams and business units.^{[1][2][4][5][11]}

Halo Security is a PCI Security Standards Council Approved Scanning Vendor, and its certificate number is 5078-01-11. Halo Security customers can set scans to run daily, weekly, monthly, quarterly, or on-demand. Customers with multiple business units can generate separate reports in the Halo Security portal. Halo Security scans look at an organization from the outside, with nothing to install and nothing to configure.^[6][7]

Halo Security connects to AWS to import assets from Route53, ElasticIP, and Elastic Load Balancer. Halo Security creates and tracks security issues in Jira, and it streams security events and findings into Splunk. Halo Security syncs security findings with Vanta for compliance monitoring and reporting, and it sends real-time security alerts to a Slack workspace. Brinqa ingests external attack surface findings directly from the Halo Security platform. Halo Security also runs a Security Review, offered quarterly or semi-annually, in which its team works with customers to identify gaps in their coverage.^[8][9][10]

The Halo Security platform helps organizations of all sizes achieve PCI compliance. In 2013, the operation was spun out to form PathDefender, which was shortly thereafter rebranded as TrustedSite. In 2022, the TrustedSite Security services were rebranded as Halo Security, and the TrustedSite brand remains for certification and marketing solutions. Halo Security has a team of over 30 people. Halo Security was originally based in San Francisco and now offers fully remote working opportunities.^{[1][5][6][7][10][11]}

Halo Security on the record

About Tenfold Security

Tenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services. Tenfold Security works with organizations on cybersecurity challenges that range from ransomware attacks and security gaps to ongoing risk management. The Tenfold team is made up of security professionals and security-minded business professionals who want to provide a service that protects the vulnerable, in business and community.^[1][3][4][5]

Aaron Weissenfluh is passionate about securing SMBs with practical security solutions. Aaron Weissenfluh, COO of Tenfold Security, has served as a CISO for a major stock exchange.^[6]

Tenfold Security's Active Penetration Testing Services simulate real-world attacks to test a customer's detection and response capabilities. Tenfold Security's Active Penetration Testing identifies and rates vulnerabilities and provides real-time mitigation. Tenfold Security's Active Penetration Testing includes continuous monitoring and analyses.^[3]

Tenfold Security's Real-Time Risk Assessment automates compliance with standards such as HIPAA, PCI and SOX.^[3]

Tenfold Security's Managed SIEM gives 24/7 visibility into what is happening across a customer's systems and applications. Tenfold Security's Managed SIEM collects and monitors security logs in real time and alerts the Tenfold Security team to suspicious activity before it becomes a business-impacting incident. Tenfold Security's Managed SIEM is a cloud-native solution that integrates with existing tools. Tenfold Security's Managed SIEM supports compliance requirements and includes two years of secure log storage.^[3]

Tenfold Security's CrowdStrike services deliver cloud-native endpoint protection, AI-powered detection and continuous monitoring. Tenfold Security's CrowdStrike services include a dedicated SOC that provides around-the-clock visibility. Tenfold Security's CrowdStrike services include access to the full CrowdStrike product suite.^[1][3]

A mid-size public university in the Midwest, serving thousands of students across multiple campuses, was a Tenfold Security client. Tenfold Security was engaged on the day of the university's full network failure. The response to the university's ransomware attack used a parallel workstream model in which different response teams worked simultaneously on network analysis, device triage, forensics and communication. Tenfold Security deployed Sentinel One and Velociraptor across all university devices. Tenfold Security used Sentinel One for real-time endpoint detection and response and Velociraptor for rapid forensic collection and hunting for persistence mechanisms. Tenfold Security's response included identifying and closing the open RDP port and auditing all vendor access paths. Tenfold Security's response included disabling compromised accounts and resetting all credentials with enforced MFA. Tenfold Security's response included assessing which data was recoverable and which was lost through the vendor breach. Tenfold Security's response included coordinating with cyber insurance to document the incident and manage communications. Tenfold Security's response included establishing an internal communication protocol to stop the spread of misinformation. Tenfold Security built the response around the university's infrastructure, vendor relationships and operational priorities. Five days after engagement, all devices were clean and the network was fully restored.

The university now operates with continuous managed detection and response, vendor management and tested incident response procedures.

Tenfold Security on the record

Sources

Halo Security full record

[1]halosecurity.comHalo Security · halosecurity.com · undated page, accessed November 12, 2026 · Tier A
[2]Trusted, US-Based Penetration Testing | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[3]12 Questions to Ask a Pentesting Company | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[4]Attack Surface Management Features | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[5]Assess security program effectiveness | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[6]Achieve PCI Compliance | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[7]PCI Compliance Scanning from an ASV | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[8]Integrations | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[9]Halo Security + Brinqa: EASM Meets CTEMHalo Security · undated page, accessed November 12, 2026 · Tier A
[10]Security Review | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[11]Customers | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A
[12]About Us | Halo SecurityHalo Security · undated page, accessed November 12, 2026 · Tier A

Tenfold Security full record

[1]Empowering Businesses with Enterprise-Grade Cybersecurity | About Tenfold SecurityTenfold Security · undated page, accessed October 21, 2026 · Tier A
[2]tenfoldsecurity.comTenfold Security · tenfoldsecurity.com · undated page, accessed October 21, 2026 · Tier A
[3]Our Services | Tenfold SecurityTenfold Security · undated page, accessed November 10, 2026 · Tier A
[4]Case StudyTenfold Security · undated page, accessed November 10, 2026 · Tier A
[5]Enterprise-Grade Security Solutions for Small & Midsize Businesses | Tenfold SecurityTenfold Security · undated page, accessed November 10, 2026 · Tier A
[6]The CEO of Cybersecurity (And Why Most Companies Still Get It Wrong)Tenfold Security · undated page, accessed November 10, 2026 · Tier A
[7]Case Study: University Recovery in 5 Days | Tenfold SecurityTenfold Security · published July 23, 2026 · Tier A

Spot a factual error? Request a correction.