Trail of Bits
Security work that outlasts the engagement
- records
- 1
- team
- 150-300
- founded
- 2012
Every AI builder headquartered in United States whose Penetration testing listing is cross-referenced (L2) or higher against public sources the provider does not control. Ranked on earned proof, never paid placement.
33 verified builders qualify for this map, every one cross-referenced (L2) or higher. Order is earned: highest verification level first, ties broken by most-recent verification. A free-plan L5 provider always outranks a paid-plan L1; plan tier is never a ranking input.
Most recent verification on this map: 2026-07-07. This is a live view, the ranking updates as builders re-verify.
Choosing an AI builder? Don’t stop at the demo. Trustgent’s six-level verification scale(L0-L5) tells you how much of a provider’s claim is independently corroborated, and how ranking works explains why proof, not spend , sets the order. Work through the questions to ask a partner and the evaluation scorecard, then request verified quotes from the builders on this map.
Security work that outlasts the engagement
Practical, human-led offensive security
Veteran-owned purple team practice for SMB and startup buyers
Blue team services from John Strand's South Dakota shop
SDVOSB cybersecurity boutique with NSA vulnerability-assessor accreditation
Prevent breaches before they occur
Continuous security validation and purple team defensive testing
Full-lifecycle application and software security for Fortune 500 and government.
Proactive security at scale
Woman-owned Montana boutique known for forensics and expert testimony.
Independent security research and vulnerability discovery for modern apps.
High-end manual application security assessments
Offensive security for the world's leading organizations
Research-powered, human-led offensive security
A ranked snapshot that stays current as builders re-verify. Post it to LinkedIn, download the image, or copy the link.
If you’re one of these builders, claim your listing free to respond to buyers, embed your verified badge, and climb the verification scale. Ranking stays earned , claiming never buys position.
This is the shareable market map. For the full, indexed directory see the Penetration testing shortlist in United States →