All companies

A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.

Provides IT consulting and technology services across cybersecurity, cloud, data and application development.

Alcott Enterprises is a managed IT service provider and cybersecurity company based in Los Angeles.

AppGate provides zero trust network access and fraud protection software for enterprises and government agencies.

Athena Agentic provides a unified cyber operations platform that automates detection, response, and hardening.

Employee-owned research firm testing embedded systems, including vehicle infotainment, telematics units and CAN networks.

AttackIQ provides a platform for continuous threat exposure management and adversarial exposure validation.

BARR Advisory helps organisations establish, manage, and audit cybersecurity and compliance programmes.

Community-driven penetration testing firm known for free security education, open-source tools, Wild West Hackin' Fest, and practical offensive security services.

Detroit firm offering a vehicle security engineering platform alongside automotive penetration testing and defensive security services.

Cybersecurity consulting and engineering for US government and industry, including threat hunting, zero trust, incident response and defence of critical infrastructure and weapon systems.

Cloudrise provides security services to enterprises and technology partners.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

Provides cybersecurity advisory and virtual chief information security officer services to organisations.

Resells security products and provides assessment, testing and advisory services with a data platform.

Cyberhaven provides a data security platform that traces data lineage to protect information across human and AI workflows.

Cyberneza provides cybersecurity and compliance consulting for defense contractors and regulated organizations.

Computer and IT infrastructure maker whose PowerProtect Data Manager software and Data Domain appliances back up data, detect ransomware and speed recovery.

US-headquartered cybersecurity consultancy with 800+ employees, serving ~40% of the Fortune 500. FedRAMP 3PAO, PCI QSA, and HITRUST accreditations.

IBM is a technology company that sells software, infrastructure, and consulting services.

Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses.

Boutique security consultancy specialising in IoT, SCADA/ICS, embedded systems, and hardware security research with world-renowned researchers.

Johanson Group is a CPA firm providing security and compliance audits.

Jones IT provides managed IT services, cybersecurity, and compliance support to businesses in the San Francisco Bay Area.

KirkpatrickPrice is a licensed CPA firm that performs cybersecurity audits and compliance assessments.

Global risk advisory firm with a 400+ person cyber practice. IR-led penetration testing that feeds active breach intelligence straight into test scoping.

Denver-based offensive security boutique with a community-first red team culture. Home of PTES co-authors and the Continuous Red Team retainer.

Managed security provider that now runs Trustwave's SpiderLabs penetration testing team, with CREST-accredited testing, red and purple teaming, and deep PCI DSS expertise.

US engineering consultancy offering ISO 21434 consulting, TARA, security verification and automotive cybersecurity training.

Lorikeet Security provides penetration testing, incident response, and security leadership services.

Mandiant provides threat intelligence and incident response, now sold as Google Threat Intelligence alongside VirusTotal within Google Cloud.

Top 10-ranked US pen testing firm with proprietary Real Time Dynamic Testing methodology. Three-tier service model from standard to maximum-depth custom testing.

Netrio provides managed IT, cybersecurity, cloud, and connectivity services to mid-market enterprises.

Provides managed IT support, cybersecurity services and custom software to small businesses.

nuHarbor provides cybersecurity services and managed security operations to organisations across government, healthcare, finance and enterprise.

Ontinue provides managed detection and response services for Microsoft security customers.

Optiv advises, deploys, and operates cybersecurity programs for organizations.

Potenza Services is a veteran-owned firm based in Tampa, Florida, founded in 2012.

Puma Security provides .NET static analysis tools and application security services.

US penetration testing firm founded in 2011, running 600+ engagements a year with a fully remote, US-based team. Manual, expert-led testing across web, network, cloud, mobile, wireless, OT/ICS, and AI/LLM. Gartner Sample Vendor for PTaaS.

Open source software company whose Advanced Cluster Security product protects Kubernetes and container workloads, alongside Red Hat Enterprise Linux and OpenShift.

US-wide pen testing firm serving major cities including Atlanta, Dallas, Denver, Houston, and Miami with security assessments.

Miami-based cybersecurity firm with 300+ employees and deep healthcare/HIPAA expertise. Delivering pen testing since 2000.

RemoteThreat provides an offensive cyber operations platform for red teams and government mission teams.

SafeBreach provides a platform that validates security controls and manages cyber exposure for enterprises.

US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with external, internal, web application, wireless and PCI DSS penetration testing plus CMMC Level 1 and 2 readiness work.

CREST-accredited information security and GRC consulting firm near Dallas. Pairs full-scope penetration testing with governance, risk, and compliance advisory and security training.

Adversary-focused security firm created by former DoD red team operators. Creators of BloodHound. CREST-accredited for penetration testing, red teaming, and purple team assessments.

TestPros is an independent IT compliance firm that has been testing since 1988.

CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.