All companies
Every cybersecurity vendor and service firm on the list. Tick the filters to build a shortlist, then open a profile to see who owns the company and what it does. You can also browse by category or country, or see recent deals.
Results
See also Breach and attack simulation vendors and companies based in the United States.
| Company | Category | Based in | Founded | Ownership |
|---|---|---|---|---|
 AttackIQ AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation. | Breach and attack simulation | Los Altos, United States | 2014 | Private |
B BreachLock Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points. | Penetration testing | New York, United States | 2019 | Private |
 Canima Canima provides an AI-powered penetration testing platform. | Penetration testing | Dover, United States | 2025 | Private |
 CyCognito CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures. | Attack surface management | Palo Alto, United States | Private | |
 HiddenLayer HiddenLayer provides a security platform for AI applications, protecting against adversarial threats. | AI and LLM security | Austin, United States | 2022 | Private |
 Horizon3 Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments. | Penetration testing | San Francisco, United States | 2019 | Private |
N NetSPI Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management. | Penetration testing | Minneapolis, United States | 2001 | Owned by KKR |
 Picus Security Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks. | Breach and attack simulation | Wilmington, United States | 2013 | Private |
 Praetorian Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine. | Penetration testing | Austin, United States | 2010 | Private |
 RemoteThreat RemoteThreat provides an offensive cyber operations platform for red teams and government mission teams. | Breach and attack simulation | Fulton, United States | Private | |
 RiskRecon by Mastercard RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk. | Third-party risk and security ratings | Murray, United States | Private | |
 SafeBreach SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises. | Breach and attack simulation | Sunnyvale, United States | Private | |
 SCYTHE SCYTHE provides a platform for continuous adversarial exposure validation across IT, cloud, and OT environments. | Breach and attack simulation | Columbia, United States | 2018 | Private |
 TrustedSec Offensive security firm founded by former NSA operator David Kennedy, delivering CREST-accredited penetration testing, red teaming, and adversary simulation to Fortune 500 and government clients. | Penetration testing | Fairlawn, United States | 2012 | Private |
 Virtue AI Virtue AI provides an enterprise AI safety platform for securing AI agents and applications. | AI and LLM security | San Francisco, United States | Part of Fortinet |