Trail of Bits
New York, United States
Security work that outlasts the engagement
Penetration test…Application secu…Red teaming
- records
- 1
- team
- 150-300
- founded
- 2012
Providers
The verified index.
AI-implementation providers worldwide, filterable by capability, characteristic, regulatory readiness, and verification level. Free-plan providers with outcome-verified records always rank above paid-plan providers with only claimed listings.
24 providers
Verified providers
TrustedSec
Fairlawn, United States
Practical, human-led offensive security
Penetration test…Red teamingIncident response+1 more
- records
- 1
- team
- 100-250
- founded
- 2012
Sprocket Security
Madison, WI, United States
Penetration test…Red teamingVulnerability ma…
- records
- 1
- team
- 10-50
- founded
- 2017
Synack
Redwood City, CA, United States
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 200+
- founded
- 2013
PurpleSec
Washington, DC, United States
Veteran-owned purple team practice for SMB and startup buyers
Blue team & dete…Red teamingVulnerability ma…+1 more
- records
- 1
- team
- 10-50
- founded
- 2019
Black Hills Information Security
Spearfish, SD, United States
Blue team services from John Strand's South Dakota shop
Blue team & dete…Red teamingThreat hunting+1 more
- records
- 1
- team
- 50-200
- founded
- 2008
Praetorian
Austin, United States
Prevent breaches before they occur
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 200-500
- founded
- 2010
OnDefend
Jacksonville, United States
Continuous security validation and purple team defensive testing
Blue team & dete…Red teamingPenetration test…+2 more
- records
- 1
- team
- 50-100
- founded
- 2016
nVisium
Herndon, United States
Full-lifecycle application and software security for Fortune 500 and government.
Application secu…Penetration test…Vulnerability ma…
- records
- 1
- team
- 50-100
- founded
- 2009
NetSPI
Minneapolis, United States
Proactive security at scale
Penetration test…Red teamingVulnerability ma…+1 more
- records
- 1
- team
- 1000+
- founded
- 2001
LMG Security
Missoula, United States
Woman-owned Montana boutique known for forensics and expert testimony.
Incident responsePenetration test…Application secu…+1 more
- records
- 1
- team
- 11-50
- founded
- 2008
Leviathan Security Group
Seattle, WA, United States
Penetration test…Application secu…
- records
- 1
- team
- 50-200
- founded
- 2006
LevelBlue
Dallas, TX, United States
SOC & MDR monito…Incident responseVulnerability ma…+2 more
- records
- 1
- team
- 200+
- founded
- 2024
Latitude Information Security
Havertown, PA, United States
Penetration test…Application secu…Vulnerability ma…+1 more
- records
- 1
- team
- 10-50
- founded
- 2019
Kroll
New York, NY, United States
Incident responsePenetration test…Application secu…+2 more
- records
- 1
- team
- 200+
- founded
- n/a
IOActive
Seattle, WA, United States
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 200+
- founded
- 1998
HackerOne
San Francisco, CA, United States
Vulnerability ma…Penetration test…Application secu…
- records
- 1
- team
- 200+
- founded
- 2012
Dragos
Hanover, MD, United States
Blue team & dete…Incident responseVulnerability ma…+2 more
- records
- 1
- team
- 200+
- founded
- 2016
Critical Start
Plano, TX, United States
SOC & MDR monito…Threat huntingIncident response+2 more
- records
- 1
- team
- 200+
- founded
- 2012
Bugcrowd
San Francisco, CA, United States
Vulnerability ma…Penetration test…Application secu…
- records
- 1
- team
- 200+
- founded
- 2012
Bishop Fox
Tempe, United States
Offensive security for the world's leading organizations
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 500+
- founded
- 2004
Buchanan Technologies
Grapevine, TX, United States
24/7/365 managed threat hunting from a Texas-HQ MSP
Threat huntingSOC & MDR monito…Incident response+2 more
- records
- 0
- team
- 500-1000
- founded
- 1988
Rendition Infosec
Augusta, GA, United States
Jake Williams' consulting shop near Fort Gordon
Blue team & dete…Incident responseThreat hunting+1 more
- records
- 0
- team
- 10-50
- founded
- 2013
Know what you need? Skip the scrolling.
Describe your work once, we route it to a few verified (L3+) builders you choose. Free, plan-blind, capped at three.
Ranked on proof, not pay-to-play. Default order is verification level, then record count, then recency, plan tier is never a factor. How we verify →
How we rank
Verification level first. Recency second. Plan tier never.
Within a level, more recent verification records sort higher. A free-plan provider with one outcome-verified record always ranks above a Premium-plan provider with only a claimed listing.