Pentest Security Tools

Aikido provides everything the average startup to mid-market company needs for security in a box - every code and cloud security scanner under the sun without much feature compromise, alongside a surprisingly robust runtime application solution for things like bot prevention. A no-nonsense replacement for a lot of more "specialized" solutions that tend to slow developers down.

Corgea provides a robust bundling of AI first scanning tools - from AI SAST to SCA and Secrets scanning. Corgea's especially strong at discovering vulnerabilities via AI scanning, and AI based prioritization for false positive analysis.

Organizations looking for a high level of technical sophistication in their engagement should go to Black Hills Information Security for testing. This group has a well earned and stellar reputation for their work as well as great training.

Ox provides an all-in-one application security solution that provides their own scanners combined with the ability to import third party findings. They also have a robust API for managing the data in the tool.

Escape is doing amazing things with their approach to DAST. They thoroughly discover your APIs and schemas by searching your frontend code, and then test those APIs from the outside. They have great scanning support for modern languages, and also in depth testing configurations.

XBOW deploy AI agents that continuously map an application's attack surface, chain and execute exploits, and independently validate findings to eliminate false positives. Testing triggers on application changes, and its agents reached #1 on the US HackerOne leaderboard.

Due to their foundations in the gaming industry, Cyrex they have built a large variety of custom tooling and take a developer first approach to pentesting that sets them apart by looking at the code alongside your app.

Doyensec offers whitebox application security testing with specialties on modern architectures like graphql, electron, and Javascript more broadly.

Kulkan has an experienced engineering team for testing hybrid, web, mobile, and other environments. They take a grey box approach and work directly with your team to present findings and validate remediations without extra cost.

Rhino Security Labs offers better than average penetration testing that's focused more heavily on SaaS and DevOps vulnerabilities over traditional infrastructure scanning. They are a great choice for organizations that are looking for a meaningful engagement.

Ophion gets the closest I've seen to a realistic automated pentest, and are essentially offering ongoing recon as a service. They aren't just running DAST scanners against your endpoints, but are instead doing a very realistic reacon of your public facing assets. One small example illustrating the difference is looking at the public commit history of your company employees on public GitHub repos.

Intigriti is a bug bounty platform that differentiates with meaningful support from their internal teams to curating and prioritizing your bug reports, as well as finding the right testers for your needs.

Inspectiv has built a bug bounty platform focused on the customer experience of managing the reports and payouts on your behalf, eliminating some of the mundane work of running a bug bounty program.

Argos offers a simple platform built for MSSP's to run cloud security tests on custom environments. They provide a combination of CSPM and Asset Mapping technologies to provide exactly the information a provider needs to generate a point in time report.

Cobalt has quickly become the leader in penetration testing due to their combination of HackerOne like bug bounty programs with more standard pen testing. They are a great and consistent middle choice for penetration testing, that will go deeper than many, but not as deep as boutique firms.

HackerOne is the standard for bug bounty programs. It's questionable if you can use them to check the box for a pentest, so check with your auditor before doing so; however, a bug bounty program can be much more useful than a pentest in many cases. Keep in mind the heavy maintenance cost of auditing reports from people who want bounties for minor findings.

MindPoint Group offers a robust number of services, primarily differentiated by being able to assist with larger security engineering efforts like implementing secure terraform or active directory.

Cloudyrion provides hands on security testing and consulting designed to help organizations implement secure by design processes.

A-lign offers decent penetration testing alongside their audits. They are a good choice for organizations that are looking for a one stop shop for their compliance needs, but not if you're looking for a deep engagement.

Staris built a platform for open box pentesting powered by GenAI. They look at your code and your application, build a PoC exploit of findings as a code test, and give you the fixed code. The workflow is wrapped as a pentest - which offers a glimpse into what the future of pentesting will undoubtedly look like. Staris uses GenAI to help find exploits from SAST to runtime.

Include Security focuses on in depth pentests based on both code and the website, and offers reasonably priced engagements to thoroughly test your application.

Agentic AI offensive security platform running continuous, human-overseen penetration testing across web apps, APIs, networks, and AI systems.

Proprietary offensive-security AI model that continuously pentests web apps, mobile apps, APIs, and external attack surfaces.

Abira Security provides numerous security services like DevSecOps assessments and implementations, but one piece of their services is pentesting.

Cytix monitors different integrations points such as Jira and Github for high risk changes and provides on demand pentesting of the new services or endpoints.

Ethiack is a combination DAST scanner and pentesting platform, using customized scanners to detect issues and working with hackers for either validation or manual pentesting.