Penetration testing in United States
These 28 penetration testing providers say they serve clients in United States. Most SOC 2 and ISO audits expect a recent penetration test, and any of these providers say they can run one.
Updated 1 Oct 2026. How we research- Firms listed (of penetration testing providers)
- 28
- Published prices
- $3,000 to $60,000 4 firms, each linked to its source
- Checked in an official register
- 6 of 28
FiltersClear all
Prescient Security & Assurance5 verifiedAudit firm and certification body and consultant, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Verified
A-LIGN2 verifiedAudit firm and certification body, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Verified
Linford & Company LLP2 verifiedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Verified
- GRSee1 verifiedConsultant and audit firm
- Starting price
- From $15,000
- Legal entity
- Not stated
- Accreditations
- Verified
KirkpatrickPrice1 verifiedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Verified
- VISTA InfoSec1 verifiedConsultant, India
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Verified
AuditVisorNot yet checkedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
BD EmersonNot yet checkedAudit firm and consultant, United States- Starting price
- From $7,000
- Legal entity
- Not stated
- Accreditations
- Firm states
- Bird Rock SystemsNot yet checkedConsultant, United States
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
BreachLock Inc.Not yet checkedPentest platform, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
Brown EdwardsNot yet checkedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
- CAS AssuranceNot yet checkedAudit firm, United States
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
- Consilium LabsNot yet checkedAudit firm and certification body, United States
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
- CORAL eSecureNot yet checkedConsultant
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
CyberSapiensNot yet checkedAudit firm, Australia- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
Echelon Risk + CyberNot yet checkedConsultant- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
Eden DataNot yet checkedConsultant, United States- Starting price
- From $3,000
- Legal entity
- Not stated
- Accreditations
- Not stated
FinAudit CPANot yet checkedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
- GBQ PartnersNot yet checkedAudit firm
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
Insight AssuranceNot yet checkedAudit firm and certification body, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
IS PartnersNot yet checkedAudit firm and certification body, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
Kaamel TechnologyNot yet checkedConsultant, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
LBMCNot yet checkedAudit firm, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
Pivot Point SecurityNot yet checkedConsultant, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Not stated
- Securis360Not yet checkedConsultant, United States
- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
SeisoNot yet checkedConsultant, United States- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
UzadoNot yet checkedConsultant, Canada- Starting price
- From $24,000
- Legal entity
- Not stated
- Accreditations
- Not stated
Wattlecorp Cybersecurity LabsNot yet checkedConsultant- Starting price
- Not published
- Legal entity
- Not stated
- Accreditations
- Firm states
No firms match these filters. Clear all filters
How to choose a penetration testing provider
Check what is in scope (web app, API, cloud, mobile), who does the testing, and whether the report is acceptable to your auditor. Ask about re-testing after you fix findings.
Some providers are firms with testers on staff and some are platforms that match you with testers. Both can work, so ask who is accountable for the report.
Related lists
Do I need a penetration test for SOC 2?
It is not strictly required, but many auditors and customers expect a recent one.
What does CREST accredited mean?
CREST is a body that accredits penetration testing companies. We show it only when the firm states it or a register confirms it.
How is this list ordered?
By the sort you choose. The default is the number of verified credentials, then alphabetical. Payment never changes the order, and a Featured slot is shown apart from the results and labelled as paid.