Breach and attack simulation vendors in the United States
15 of the 26 breach and attack simulation vendors we list are based in the United States. 2 are owned by another company and 13 are private. The oldest, NetSPI, was founded in 2001. Of the 4 companies here with staff numbers, the largest is NetSPI (201-500 staff).
Companies focused on breach and attack simulation in the United States
5 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
AttackIQ AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation. | Los Altos, United States | 2014 | Private | |
Picus Security Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks. | Wilmington, United States | 2013 | Private | |
RemoteThreat RemoteThreat provides an offensive cyber operations platform for red teams and government mission teams. | Fulton, United States | Private | ||
SafeBreach SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises. | Sunnyvale, United States | Private | ||
SCYTHE SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments. | Columbia, United States | 2018 | Private |
Also active in breach and attack simulation
10 companies| Company | Based in | Founded | Size | Ownership |
|---|---|---|---|---|
N NetSPI Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management. | Minneapolis, United States | 2001 | 201-500 staff | Owned by KKR |
B BreachLock Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points. | New York, United States | 2019 | 51-200 staff | Private |
Praetorian Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine. | Austin, United States | 2010 | 51-200 staff | Private |
TrustedSec Offensive security firm founded by former NSA operator David Kennedy, delivering CREST-accredited penetration testing, red teaming, and adversary simulation to Fortune 500 and government clients. | Fairlawn, United States | 2012 | 51-200 staff | Private |
Canima Canima provides an AI-powered penetration testing platform. | Dover, United States | 2025 | Private | |
CyCognito CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures. | Palo Alto, United States | Private | ||
HiddenLayer HiddenLayer provides a security platform for AI applications, protecting against adversarial threats. | Austin, United States | 2022 | Private | |
Horizon3 Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments. | San Francisco, United States | 2019 | Private | |
RiskRecon by Mastercard RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk. | Murray, United States | Private | ||
Virtue AI Virtue AI provides an enterprise AI safety platform for securing AI agents and applications. | San Francisco, United States | Part of Fortinet |
More breach and attack simulation vendors
All 26 breach and attack simulation vendorsEvery cybersecurity company in the United States · See every category