Trail of Bits
New York, United States
Security work that outlasts the engagement
Penetration test…Application secu…Red teaming
- records
- 1
- team
- 150-300
- founded
- 2012
Search
Search the index.
Filter verified AI builders by what they build, who they serve, how they engage, and their regulatory readiness, and, on a separate axis, by how much they've proven.
24 providers
Verified providers
Synack
Redwood City, CA, United States
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 200+
- founded
- 2013
TCM Security
Charlotte, NC, United States
Penetration test…Application secu…
- records
- 1
- team
- 10-50
- founded
- 2019
Rhino Security Labs
Seattle, WA, United States
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 10-50
- founded
- 2013
Raxis
Atlanta, GA, United States
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 10-50
- founded
- 2011
Praetorian
Austin, United States
Prevent breaches before they occur
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 200-500
- founded
- 2010
Palindrome Technologies
Hazlet, NJ, United States
Penetration test…Application secu…Vulnerability ma…
- records
- 1
- team
- 10-50
- founded
- 2005
nVisium
Herndon, United States
Full-lifecycle application and software security for Fortune 500 and government.
Application secu…Penetration test…Vulnerability ma…
- records
- 1
- team
- 50-100
- founded
- 2009
NetSPI
Minneapolis, United States
Proactive security at scale
Penetration test…Red teamingVulnerability ma…+1 more
- records
- 1
- team
- 1000+
- founded
- 2001
LMG Security
Missoula, United States
Woman-owned Montana boutique known for forensics and expert testimony.
Incident responsePenetration test…Application secu…+1 more
- records
- 1
- team
- 11-50
- founded
- 2008
Leviathan Security Group
Seattle, WA, United States
Penetration test…Application secu…
- records
- 1
- team
- 50-200
- founded
- 2006
Latitude Information Security
Havertown, PA, United States
Penetration test…Application secu…Vulnerability ma…+1 more
- records
- 1
- team
- 10-50
- founded
- 2019
Kroll
New York, NY, United States
Incident responsePenetration test…Application secu…+2 more
- records
- 1
- team
- 200+
- founded
- n/a
Doyensec
San Francisco, United States
Independent security research and vulnerability discovery for modern apps.
Application secu…Penetration test…Vulnerability ma…
- records
- 1
- team
- 10-50
- founded
- 2017
CyberSecOp
Stamford, United States
Northeast US consultancy blending DFIR, eDiscovery and 24/7 IR.
Incident responseVulnerability ma…SOC & MDR monito…+1 more
- records
- 1
- team
- 51-200
- founded
- 2001
Access Point Consulting
Allentown, PA, United States
Hands-on threat hunting for the mid-market
Threat huntingSOC & MDR monito…Incident response+2 more
- records
- 1
- team
- 50-200
- founded
- 2019
IOActive
Seattle, WA, United States
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 200+
- founded
- 1998
Independent Security Evaluators
Baltimore, MD, United States
Application secu…Penetration test…
- records
- 1
- team
- 10-50
- founded
- 2005
Include Security
Brooklyn, United States
High-end manual application security assessments
Penetration test…Application secu…
- records
- 1
- team
- 30-80
- founded
- 2010
GRIMM Cyber
Arlington, VA, United States
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 50-200
- founded
- 2013
Bishop Fox
Tempe, United States
Offensive security for the world's leading organizations
Penetration test…Red teamingApplication secu…+1 more
- records
- 1
- team
- 500+
- founded
- 2004
Atredis Partners
St. Louis, United States
Research-powered, human-led offensive security
Penetration test…Red teamingApplication secu…
- records
- 1
- team
- 30-70
- founded
- 2013
Ampcus Cyber
Chantilly, VA, United States
Penetration test…Application secu…Vulnerability ma…
- records
- 1
- team
- 50-200
- founded
- 2018
Know what you need? Skip the scrolling.
Describe your work once, we route it to a few verified (L3+) builders you choose. Free, plan-blind, capped at three.
Ranked on proof, not pay-to-play. Default order is verification level, then record count, then recency, plan tier is never a factor. How we verify →