cybersecdirectory

Breach and attack simulation vendors in the United States

15 of the 26 breach and attack simulation vendors we list are based in the United States. 2 are owned by another company and 13 are private. The oldest, NetSPI, was founded in 2001. Of the 4 companies here with staff numbers, the largest is NetSPI (201-500 staff).

Companies focused on breach and attack simulation in the United States

5 companies
CompanyBased inFoundedSizeOwnership
AttackIQ

AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation.

Los Altos, United States2014Private
Picus Security

Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks.

Wilmington, United States2013Private
RemoteThreat

RemoteThreat provides an offensive cyber operations platform for red teams and government mission teams.

Fulton, United StatesPrivate
SafeBreach

SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises.

Sunnyvale, United StatesPrivate
SCYTHE

SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments.

Columbia, United States2018Private

Also active in breach and attack simulation

10 companies
CompanyBased inFoundedSizeOwnership
NetSPI

Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.

Minneapolis, United States2001201-500 staffOwned by KKR
BreachLock

Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points.

New York, United States201951-200 staffPrivate
Praetorian

Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine.

Austin, United States201051-200 staffPrivate
TrustedSec

Offensive security firm founded by former NSA operator David Kennedy, delivering CREST-accredited penetration testing, red teaming, and adversary simulation to Fortune 500 and government clients.

Fairlawn, United States201251-200 staffPrivate
Canima

Canima provides an AI-powered penetration testing platform.

Dover, United States2025Private
CyCognito

CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures.

Palo Alto, United StatesPrivate
HiddenLayer

HiddenLayer provides a security platform for AI applications, protecting against adversarial threats.

Austin, United States2022Private
Horizon3

Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.

San Francisco, United States2019Private
RiskRecon by Mastercard

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

Murray, United StatesPrivate
Virtue AI

Virtue AI provides an enterprise AI safety platform for securing AI agents and applications.

San Francisco, United StatesPart of Fortinet

More breach and attack simulation vendors

All 26 breach and attack simulation vendors

Every cybersecurity company in the United States · See every category