Consultancies and managed services

Penetration testing and red team services

Human-led testing engagements in which consultants attack an organization's systems to find weaknesses.

47 vendors · alphabetical

• ABIR NetworksABIR Networks sells penetration testing, cloud security, risk consulting and compliance services.Ownership not established · primary category
• AccessIT GroupAccessIT Group helps clients select security technologies, offers technical solutions, and provides advisory services.Ownership not established
• Astra SecurityAstra Security sells a platform that performs continuous offensive pentests across apps, APIs and cloud.Privately held · primary category
• Beagle SecurityBeagle Security's platform automates penetration tests across web apps and public APIs, with guidance down to a tech stack and code level.Ownership not established
• Bishop FoxBishop Fox sells offensive security services, including penetration testing and continuous security testing.Ownership not established · primary category
• Blue MantisBlue Mantis combines 24/7 MDR, threat hunting, vulnerability management, cloud security, GRC, ransomware defense, penetration testing and red teaming to prioritize remediation and strengthen resilience.Ownership not established
• BreachLockBreachLock sells human-delivered, AI-powered and automated testing for attack surface management, penetration testing as a service, and automated pentesting and red teaming, integrated into the BreachLock Platform.Ownership not established · primary category
• BrinqaBrinqa sells an exposure management platform that unifies every data source.Ownership not established
• BriteBrite offers managed IT and cybersecurity services through its BriteStar and BriteProtect offerings, and public safety technology for first responders and municipalities.Owned by Sole Source Capital since 2026
• CISO GlobalCISO Global sells expert-led services and purpose-built software, delivered as one unified program.Public (NASDAQ: CISO)
• CoalfireCoalfire sells advisory, audit and assessment services.Ownership not established
• CobaltCobalt offers a full suite of offensive security services, from autonomous pentesting to human-led pentesting.Ownership not established · primary category
• CoplaCopla is a cybersecurity compliance platform that automates evidence collection, policy management, audit cycles, and control monitoring across frameworks like DORA, NIS2, ISO 27001, SOC 2, and PCI DSS.Ownership not established
• CyberNXCyberNX Technologies Pvt.Ownership not established
• CyberProofCyberProof is a cloud first security operations company and a Managed Detection & Response provider for global enterprises.Ownership not established
• CYPFERCYPFER provides incident response, ransomware recovery, digital forensics and cyber risk services.Owned by Apros Group since 2026
• DeepSeasDeepSeas sells cybersecurity services that range from strategic guidance to offensive testing and 24/7 defense, aimed at lean teams protecting complex environments.Ownership not established
• DreadnodeDreadnode sells an infrastructure platform that gives security teams the means to own, operationalize, and improve agentic cyber capabilities.Ownership not established
• Fleuret AIFleuret AI sells pentesting that combines artificial intelligence and offensive expertise.Privately held
• FRSecureFRSecure is an information security services company that helps organizations build security programs.Ownership not established
• GuidePoint SecurityGuidePoint Security sells cybersecurity services that include security program reviews, vulnerability management and penetration testing, and Privileged Access Management as a Service.Privately held
• HackenProofHackenProof is a security company that connects projects with verified security researchers who hunt for vulnerabilities across Web3 and Web2, and provides penetration testing services for web and mobile apps, APIs, and cloud infrastructure.Ownership not established
• HackerOneHackerOne puts Continuous Threat Exposure Management (CTEM) in practice through a continuous loop of discovery, validation, prioritization and remediation.Ownership not established
• Halo SecurityHalo Security sells penetration testing and continuous visibility across an attack surface, bringing testing, discovery, and scanning together.Ownership not established · primary category
• Hold Security, LLCHold Security, LLC is an Information Security, Threat Intelligence, Penetration Testing, Risk Management and Incident Response company, helping businesses of all sizes stay secure.Ownership not established
• IANSIANS is a practitioner-sourced intelligence engine where data, peer experience and expert insights converge for security teams.Ownership not established
• Integrity360Integrity360 sells managed services, consulting services, penetration testing and incident response, and describes itself as a cybersecurity and payments compliance specialist for Europe and Africa.Ownership not established
• IntigritiIntigriti is a cybersecurity company that works with ethical hackers worldwide to protect digital information.Ownership not established
• IntruderIntruder sells a single platform for continuous scanning across infrastructure, apps and cloud environments.Ownership not established
• Inversion6Inversion6 provides cybersecurity services that range from CISOs to a managed security service provider (MSSP) offering.Ownership not established
• Millennium CorporationMillennium Corporation provides red team operations and cyber training, with clients across the Department of Defense, federal civilian agencies, and the private sector.Ownership not established · primary category
• NCC GroupNCC Group is a global cyber security and resilience company with over 2000 colleagues around the world.Ownership not established · primary category
• NetSPINetSPI sells pentesting as a service (PTaaS), attack surface management (ASM), and breach and attack simulation (BAS) as a service.Ownership not established · primary category
• NopSecNopSec sells a Cyber Threat Exposure Management (CTEM) platform and penetration testing services.Ownership not established
• OptivOptiv sells cybersecurity services that advise on, deploy and operate security programs for organizations.Ownership not established
• Red SentryRed Sentry sells offensive security services, from one-off penetration tests to ongoing PTaaS (Penetration Testing as a Service) partnerships.Ownership not established · primary category
• REDLatticeREDLattice is a U.S.-owned global defense tech company that provides cyber intelligence capabilities to law enforcement, intelligence, and military intelligence agencies.Ownership not established · primary category
• SaepioSaepio is a dedicated cyber security specialist whose team supports organisations across cloud, SaaS, identity, data and threat response.Ownership not established
• SAICSAIC is a mission integrator that sells a portfolio of offerings integrating emerging technology into mission critical operations.Ownership not established
• ScytaleScytale sells an AI GRC platform that combines automation, AI agents, continuous monitoring and dedicated GRC experts.Ownership not established
• SygniaSygnia provides cyber incident response, managed detection and response, and proactive cyber security services to organizations.Ownership not established
• SynackSynack delivers continuous penetration testing as a service (PTaaS) that combines agentic AI, the Synack Platform and the Synack Red Team.Ownership not established
• Tenfold SecurityTenfold Security provides Active Penetration Testing, Real-Time Risk Assessment, Managed SIEM and CrowdStrike services.Ownership not established
• TenzaiTenzai sells an AI agentic penetration testing platform that hacks, exploits and fixes vulnerabilities across enterprise software.Privately held
• UltraViolet CyberUltraViolet Cyber sells security services that run offensive and defensive operations as one integrated team.Ownership not established
• UnderDefenseUnderDefense sells UnderDefense MAXI, a security and compliance automation platform, and an MDR service in which security experts monitor, detect and respond to incidents.Ownership not established
• Vonahi SecurityVonahi Security sells vPenTest, an automated network penetration testing SaaS platform. vPenTest is a scripted network penetration testing platform that runs the exact same steps and processes performed by a security consultant doing a live pentest. vPenTest is a full-scale penetration testing platform that incorporates the knowledge, methodologies, techniques and commonly used tools of multiple consultants into a single platform. vPenTest covers host discovery, service enumeration, vulnerability analysis, exploitation, post-exploitation, privilege escalation and lateral movement, as well as documentation and reporting.Owned by Kaseya · primary category