Pentest Security Tools

Organizations looking for a high level of technical sophistication in their engagement should go to Black Hills Information Security for testing. This group has a well earned and stellar reputation for their work as well as great training.

Due to their foundations in the gaming industry, Cyrex they have built a large variety of custom tooling and take a developer first approach to pentesting that sets them apart by looking at the code alongside your app.

Doyensec offers whitebox application security testing with specialties on modern architectures like graphql, electron, and Javascript more broadly.

Kulkan has an experienced engineering team for testing hybrid, web, mobile, and other environments. They take a grey box approach and work directly with your team to present findings and validate remediations without extra cost.

Rhino Security Labs offers better than average penetration testing that's focused more heavily on SaaS and DevOps vulnerabilities over traditional infrastructure scanning. They are a great choice for organizations that are looking for a meaningful engagement.

Ophion gets the closest I've seen to a realistic automated pentest, and are essentially offering ongoing recon as a service. They aren't just running DAST scanners against your endpoints, but are instead doing a very realistic reacon of your public facing assets. One small example illustrating the difference is looking at the public commit history of your company employees on public GitHub repos.

HackerOne is the standard for bug bounty programs. It's questionable if you can use them to check the box for a pentest, so check with your auditor before doing so; however, a bug bounty program can be much more useful than a pentest in many cases. Keep in mind the heavy maintenance cost of auditing reports from people who want bounties for minor findings.

Include Security focuses on in depth pentests based on both code and the website, and offers reasonably priced engagements to thoroughly test your application.