All companies

A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.

Provides cloud security, compliance and managed detection and response services to regulated industries.

Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks.

Tempe, Arizona-headquartered offensive security firm and Black Hat / DEF CON regulars, makers of the Cosmos continuous attack surface management platform.

Community-driven penetration testing firm known for free security education, open-source tools, Wild West Hackin' Fest, and practical offensive security services.

Detroit firm offering a vehicle security engineering platform alongside automotive penetration testing and defensive security services.

Cybersecurity consulting and engineering for US government and industry, including threat hunting, zero trust, incident response and defence of critical infrastructure and weapon systems.

Cloud-based Penetration Testing as a Service platform combining AI-driven automation with expert manual testing at accessible price points.

Crowdsourced bug bounty pioneer founded in 2012 by Casey Ellis, offering managed programs and crowd-powered penetration testing from hundreds of thousands of ethical hackers.

Canima provides an AI-powered penetration testing platform.

Provides penetration testing, PCI ASV scanning, and managed security services for compliance and threat detection.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

Pioneer of Pentest as a Service, delivering fast, platform-based penetration testing with a vetted global community of security researchers.

CrowdStrike provides AI-native cybersecurity solutions to stop breaches.

Resells security products and provides assessment, testing and advisory services with a data platform.

CyCognito provides a platform that discovers and tests external attack surfaces to identify security exposures.

RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice.

Dragos provides cybersecurity for industrial control systems and operational technology environments.

EC-Council is a cybersecurity certification and training body.

ERMProtect provides cybersecurity assessments, penetration testing, compliance audits, and digital forensics services.

Finite State provides a product security platform for connected devices, automating SBOM generation, vulnerability analysis, and compliance evidence.

Foresite provides managed detection and response services using agentic AI for security operations.

World-renowned cybersecurity firm now part of Google Cloud, delivering threat intelligence-led penetration testing and red teaming informed by front-line incident response experience.

Michigan security research firm offering penetration testing and training for vehicles and other transport systems.

US-headquartered cybersecurity consultancy with 800+ employees, serving ~40% of the Fortune 500. FedRAMP 3PAO, PCI QSA, and HITRUST accreditations.

World's largest ethical hacker platform with over one million researchers, offering bug bounties and structured penetration testing to the US DoD and Fortune 500.

HiddenLayer provides a security platform for AI applications, protecting against adversarial threats.

Horizon3 runs autonomous attack testing to find and verify exploitable weaknesses in production environments.

IBM is a technology company that sells software, infrastructure, and consulting services.

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

KirkpatrickPrice is a licensed CPA firm that performs cybersecurity audits and compliance assessments.

Global risk advisory firm with a 400+ person cyber practice. IR-led penetration testing that feeds active breach intelligence straight into test scoping.

Denver-based offensive security boutique with a community-first red team culture. Home of PTES co-authors and the Continuous Red Team retainer.

Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise.

Lorikeet Security provides penetration testing, incident response, and security leadership services.

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

Top 10-ranked US pen testing firm with proprietary Real Time Dynamic Testing methodology. Three-tier service model from standard to maximum-depth custom testing.

Penetration testing firm trusted by nine of the top ten US banks, with the Resolve platform for continuous attack surface management.

Provides managed IT support, cybersecurity services and custom software to small businesses.

NINJIO provides cybersecurity awareness training and human risk management through personalised coaching and phishing simulations.

NSS Labs provides independent testing and validation of cybersecurity controls and AI systems.

nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise.

Creators of OSCP, Kali Linux, and Exploit-DB, offering penetration testing services from the team that trains the world's ethical hackers.

Optiv advises, deploys, and operates cybersecurity programs for organizations.

Palo Alto Networks provides cybersecurity platforms and services to protect organizations from cyber threats.

Picus Security provides a platform that validates exposures and security controls by simulating cyber attacks.

Offensive security firm founded by former DoD professionals. Combines deep offensive testing with the Chariot attack surface management platform and its Exploit validation engine.

Prescient Assurance provides SOC 2 audits and security compliance certifications for SaaS companies.

ProjectDiscovery builds open-source security tools and infrastructure for mapping, probing, crawling, and detecting vulnerabilities.

Rapid7 provides AI-powered managed cybersecurity operations, including MDR, SIEM, and vulnerability management.